{"author_url":"https://blog.hatena.ne.jp/xrekkusu/","published":"2014-09-06 03:32:46","categories":["CTF"],"url":"https://xrekkusu.hatenablog.jp/entry/2014/09/06/033246","blog_url":"https://xrekkusu.hatenablog.jp/","provider_url":"https://hatena.blog","html":"<iframe src=\"https://hatenablog-parts.com/embed?url=https%3A%2F%2Fxrekkusu.hatenablog.jp%2Fentry%2F2014%2F09%2F06%2F033246\" title=\"SECCON2014 \u6a2a\u6d5c\u4e88\u9078Web Writeup - \u30d0\u30e9\u30f3\u30b9\u3092\u53d6\u308a\u305f\u3044\" class=\"embed-card embed-blogcard\" scrolling=\"no\" frameborder=\"0\" style=\"display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;\"></iframe>","image_url":"http://cdn-ak.f.st-hatena.com/images/fotolife/x/xrekkusu/20140908/20140908114715.png","version":"1.0","provider_name":"Hatena Blog","height":"190","blog_title":"\u30d0\u30e9\u30f3\u30b9\u3092\u53d6\u308a\u305f\u3044","type":"rich","author_name":"xrekkusu","description":"\u7af6\u6280\u958b\u59cb (14:20) FLAG1 (14:24) \u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8\u3092\u64ae\u308bWeb\u30a2\u30d7\u30eaHTML\u5185\u306b\u80cc\u666f\u8272\u3068\u540c\u5316\u3057\u305f\u30ea\u30f3\u30af\u304c\u3042\u308b\u3053\u3068\u3092\u898b\u3064\u3051\u308b \u2192http://localhost/private/\u3057\u304b\u3057localhost only\u3068\u8868\u793a\u3055\u308c\u30a2\u30af\u30bb\u30b9\u3067\u304d\u306a\u3044\u3002\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8\u3067/private\u3092\u898b\u308b\u3068FLAG1, AdminLogin, ls.txt\u304c\u898b\u3064\u304b\u308b\u3002 \u6539\u3081\u3066/private/FLAG1\u306e\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8\u3092\u53d6\u308b\u3068\u30d5\u30e9\u30b0\u30b2\u30c3\u30c8 SECCON{screenshotFromLocalhost!} FLAG2 (14:26) \u30b9\u30af\u30ea\u30fc\u30f3\u30ad\u30e3\u30d7\u30c1\u30e3\u3067/private\u5185\u3092\u8997\u304f\u3068AdminLo\u2026","width":"100%","title":"SECCON2014 \u6a2a\u6d5c\u4e88\u9078Web Writeup"}