hamayanhamayan https://blog.hatena.ne.jp/hamayanhamayan/ はまやんはまやんはまやん https://blog.hamayanhamayan.com/ Security https://ctftime.org/task/8791 前提知識 XXE 問題 There is not much to see in this enterprise-ready™ web application. https://bnv.web.ctfcompetition.com/ Writeups https://www.youtube.com/watch?v=OqDxy-wm9to https://medium.com/hmif-itb/googlectf-2019-web-bnv-writeup-nicholas-rianto-putra-medium-b8e2d86d78b2 … 190 <iframe src="https://hatenablog-parts.com/embed?url=https%3A%2F%2Fblog.hamayanhamayan.com%2Fentry%2F2019%2F07%2F20%2F171344" title="BNV [Google Capture The Flag 2019 (Quals)] - はまやんはまやんはまやん" class="embed-card embed-blogcard" scrolling="no" frameborder="0" style="display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;"></iframe> https://cdn-ak.f.st-hatena.com/images/fotolife/h/hamayanhamayan/20190720/20190720130904.png Hatena Blog https://hatena.blog 2019-07-20 17:13:44 rich https://blog.hamayanhamayan.com/entry/2019/07/20/171344 1.0 100%