Jeff_ITBlog

풀이 동일하게 로그인 한 후에 cat 명령어로 flag를 확인하면 엄청나게 많은 양의 디코딩된 파일이 있을 것이다 그래서 스크립트로 문자열을 찾아낼 수 있게 while 이나 for 문을 이용하여 스크립트를 짜야한다 #!/bin/bash encode_file=$(cat "/home/rcity8/flag.txt"0 while true; do decode_string=$(echo "$encode_file" | base64 --decode) echo "$decode_string" encode_file=$deocde_string done Vm1wSmQyVkZOVWhTYTJScVVrWndjRlJYTVZOamJGcHlWMnQwVkdKR1JqTlhhMmgzWWtaYWMxTnNXbFpXZWxaUVZtcEtWMk5zWkZ..

풀이 ┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity7@ctf.redraccoon.kr -p 31338 rcity7@ctf.redraccoon.kr's password: rcity7@04d1eb9322c1:~$ ls -l total 0 rcity7@04d1eb9322c1:~$ ss -bash: ss: command not found rcity7@04d1eb9322c1:~$ lsof -bash: lsof: command not found rcity7@04d1eb9322c1:~$ nestat -bash: nestat: command not found rcity7@04d1eb9322c1:~$ nmap localhost Starting Nmap 7.80 ( https://nm..

풀이 ┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity6@ctf.redraccoon.kr -p 31338 rcity6@ctf.redraccoon.kr's password: rcity6@04d1eb9322c1:~$ cat flag @@@@�▒▒▒���� ���-�=�=���-�=�=�888 XXXDDS�td888 P�td\#\#\#

풀이 ┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity5@ctf.redraccoon.kr -p 31338 rcity5@ctf.redraccoon.kr's password: rcity5@04d1eb9322c1:~$ ls flag.txt rcity5@04d1eb9322c1:~$ cat flag.txt flag is base64 encoded string - ZmxhZzogTTJwTjl6UTFzVzN5SDhnUjZkMAo=rcity5@04d1eb9322c1:~$ rcity5@04d1eb9322c1:~$ echo "ZmxhZzogTTJwTjl6UTFzVzN5SDhnUjZkMAo=" | base64 --decode flag: M2pN9zQ1sW3yH8gR6d0 base64 명령어..

풀이 ┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity4@ctf.redraccoon.kr -p 31338 rcity4@ctf.redraccoon.kr's password: rcity4@04d1eb9322c1:~$ cat flag.txt | grep -riw "flag" flag.txt:syncope Nucula vicissitous Minos orrhology gustation multicarinate flag deuterogelatose pachycephalia derivational flag.txt:millrace za Spartacist flag here euhemerist Araby sphacelus licorn nonconstruable flag.txt:Amii..

풀이 ┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity3@ctf.redraccoon.kr -p 31338 rcity3@ctf.redraccoon.kr's password: rcity3@04d1eb9322c1:~$ ls -al total 64 drwxr-xr-x 1 root root 4096 Mar 6 08:04 . drwxr-xr-x 1 root root 4096 Mar 6 08:03 .. -rw-r--r-- 1 root root 220 Jan 6 2022 .bash_logout -rw-r--r-- 1 root root 3771 Jan 6 2022 .bashrc -rw-r--r-- 1 root root 807 Jan 6 2022 .profile drw-r-x--- 12 ..

풀이 ┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity2@ctf.redraccoon.kr -p 31338 rcity2@ctf.redraccoon.kr's password: rcity2@04d1eb9322c1:~$ ls -al total 28 drwxr-xr-x 1 root root 4096 Mar 6 08:04 . drwxr-xr-x 1 root root 4096 Mar 6 08:03 .. -r--r----- 1 root rcity2 20 Mar 6 08:04 ...catthisfile.txt -rw-r--r-- 1 root root 220 Jan 6 2022 .bash_logout -rw-r--r-- 1 root root 3771 Jan 6 2022 .bashrc -r..

┌──(root㉿kali)-[~/raccoon/rcity] └─# ssh rcity1@ctf.redraccoon.kr -p 31338 rcity1@ctf.redraccoon.kr's password: (rcity0에서 얻은 flag) rcity1@04d1eb9322c1:~$ find ./ -name "flag.txt" rcity1@04d1eb9322c1:~$ ls flag 'maybe here' nowaithere rcity1@04d1eb9322c1:~$ find ./ -name "*.txt" ./maybe here/fl ag.txt rcity1@04d1eb9322c1:~$ cat ./maybe\ here/fl\ ag.txt n1zP6Q3jX4wC7r2bH5T flag.txt 파일을 그대로 검색해 봤더니..

ssh rcity0@ctf.redraccoon.kr -p 31338 rcity0 ------------------접속------------------------ rcity0@04d1eb9322c1:~$ ls flag rcity0@04d1eb9322c1:~$ cat flag d9mK4R2cS1gJ3o7V8A0 간단한 ssh 접속으로 다음 rcity1의 비밀번호를 얻는 워게임 rcity를 시작하겠습니다