Blog - Revision history

Exf at 11:52, 30 September 2022

2022-09-30T11:52:25Z

← Older revision		Revision as of 11:52, 30 September 2022
Line 17:		Line 17:
	https://book.hacktricks.xyz/pentesting-web/file-inclusion		https://book.hacktricks.xyz/pentesting-web/file-inclusion


			<syntaxhighlight lang="abap">
	I tried the following commands		I tried the following commands
	~~<syntaxhighlight>~~
	\..\..		\..\..
	..%252f..%252f..%252f..		..%252f..%252f..%252f..
Line 24:		Line 26:
	....//....//		....//....//
	</syntaxhighlight>		</syntaxhighlight>
	At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.

	At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.		At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.

Exf at 11:51, 30 September 2022

2022-09-30T11:51:37Z

← Older revision		Revision as of 11:51, 30 September 2022
Line 15:		Line 15:
	I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.		I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.

	https://book.hacktricks.xyz/pentesting-web/file-inclusion~~<syntaxhighlight lang="bash">~~		https://book.hacktricks.xyz/pentesting-web/file-inclusion
	~~asd~~
	~~</syntaxhighlight>~~I tried the following commands		I tried the following commands
	<~~code~~>		<syntaxhighlight>
	\..\..		\..\..
	..%252f..%252f..%252f..		..%252f..%252f..%252f..
	./..//		./..//
	....//....//		....//....//
	</~~code~~>		</syntaxhighlight>
	At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.		At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.

Exf at 11:51, 30 September 2022

2022-09-30T11:51:12Z

← Older revision		Revision as of 11:51, 30 September 2022
Line 15:		Line 15:
	I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.		I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.

	[https://book.hacktricks.xyz/pentesting-web/file-inclusion]		https://book.hacktricks.xyz/pentesting-web/file-inclusion<syntaxhighlight lang="bash">
			asd
	I tried the following commands		</syntaxhighlight>I tried the following commands
	<code>		<code>
	\..\..		\..\..
Line 24:		Line 24:
	....//....//		....//....//
	</code>		</code>
			At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.

	At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.		At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.
Line 31:		Line 32:
	===Tools===		===Tools===
	*Browser		*Browser
	*Common path traversal - [https://book.hacktricks.xyz/pentesting-web/file-inclusion]		*Common path traversal - https://book.hacktricks.xyz/pentesting-web/file-inclusion
	===Flag===		===Flag===
	<code><nowiki>ctftech{hello-world}}</nowiki></code>		<code><nowiki>ctftech{hello-world}}</nowiki></code>
	===Links===		===Links===
	*[[CTF Challenges \| Back to CTF Challenges page]]		*[[CTF Challenges \| Back to CTF Challenges page]]

Exf at 11:50, 30 September 2022

2022-09-30T11:50:36Z

← Older revision		Revision as of 11:50, 30 September 2022
Line 31:		Line 31:
	===Tools===		===Tools===
	*Browser		*Browser
	*Common path traversal - [https://book.hacktricks.xyz/pentesting-web/file-inclusion~~<nowiki>~~]~~</nowiki>~~		*Common path traversal - [https://book.hacktricks.xyz/pentesting-web/file-inclusion]
	===Flag===		===Flag===
	<code><nowiki>ctftech{hello-world}}</nowiki></code>		<code><nowiki>ctftech{hello-world}}</nowiki></code>
	===Links===		===Links===
	*[[CTF Challenges \| Back to CTF Challenges page]]		*[[CTF Challenges \| Back to CTF Challenges page]]

Exf at 11:50, 30 September 2022

2022-09-30T11:50:10Z

← Older revision		Revision as of 11:50, 30 September 2022
Line 20:		Line 20:
	<code>		<code>
	\..\..		\..\..

	..%252f..%252f..%252f..		..%252f..%252f..%252f..

	./..//		./..//

	....//....//		....//....//
	</code>		</code>

Exf at 11:49, 30 September 2022

2022-09-30T11:49:55Z

← Older revision		Revision as of 11:49, 30 September 2022
Line 15:		Line 15:
	I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.		I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.

	[[https://book.hacktricks.xyz/pentesting-web/file-inclusion~~\|https://book.hacktricks.xyz/pentesting-web/file-inclusion]~~]		[https://book.hacktricks.xyz/pentesting-web/file-inclusion]

	I tried the following commands		I tried the following commands
Line 33:		Line 33:
	<code>....//....//....//var/backup/secret.txt</code>		<code>....//....//....//var/backup/secret.txt</code>
	===Tools===		===Tools===
	* Browser		*Browser
	* Common path traversal - [[https://book.hacktricks.xyz/pentesting-web/file-inclusion~~\|https://book.hacktricks.xyz~~/~~pentesting-web/file-inclusion]]~~		*Common path traversal - [https://book.hacktricks.xyz/pentesting-web/file-inclusion<nowiki>]</nowiki>
	===Flag===		===Flag===
	<code>ctftech{hello-world}}</code>		<code><nowiki>ctftech{hello-world}}</nowiki></code>
	===Links===		===Links===
	*[[CTF Challenges \| Back to CTF Challenges page]]		*[[CTF Challenges \| Back to CTF Challenges page]]

Exf at 11:48, 30 September 2022

2022-09-30T11:48:57Z

← Older revision		Revision as of 11:48, 30 September 2022
Line 20:		Line 20:
	<code>		<code>
	\..\..		\..\..

	..%252f..%252f..%252f..		..%252f..%252f..%252f..

	./..//		./..//

	....//....//		....//....//
	</code>		</code>

Exf at 11:48, 30 September 2022

2022-09-30T11:48:43Z

← Older revision		Revision as of 11:48, 30 September 2022
Line 1:		Line 1:
			[[File:Blog-task+flag.png\|thumb\|Blog task + Flag]]
			[[File:Plog-flag.PNG\|thumb\|Blog flag]]

	===Description===		===Description===
	Web administartor is building a new blog to document web development related news and events.		Web administartor is building a new blog to document web development related news and events.

Exf at 11:47, 30 September 2022

2022-09-30T11:47:33Z

← Older revision		Revision as of 11:47, 30 September 2022
Line 1:		Line 1:
	===Description===		===Description===
			Web administartor is building a new blog to document web development related news and events.

			Website is still under construction but some security has been implemented.

			50pts
	===Question===		===Question===
			Use the weakness in the web application to read a secret file at /var/backup/secret.txt
			===Solution===
			The webpage uses the same solution as before, i.e. it retrieves the content of the webpage from the file. However, when I tried the previous task of moving from one ../ folder to another, a "security" was created for that page which disables that command.

			I was looking for common other ways to move from one folder to another and found the following webpage, which lists very well the different types of attacks.

			[[https://book.hacktricks.xyz/pentesting-web/file-inclusion\|https://book.hacktricks.xyz/pentesting-web/file-inclusion]]

			I tried the following commands
			<code>
			\..\..
			..%252f..%252f..%252f..
			./..//
			....//....//
			</code>

	~~===Solution===~~		At some point I noticed, when I tried the ....//....// command, that the check only removes the ../ text once, but in this case when there were more characters it left just the right number of characters.

			By taking advantage of this, I was able to open up the right file.
			<code>....//....//....//var/backup/secret.txt</code>
	===Tools===		===Tools===
			* Browser
			* Common path traversal - [[https://book.hacktricks.xyz/pentesting-web/file-inclusion\|https://book.hacktricks.xyz/pentesting-web/file-inclusion]]
	===Flag===		===Flag===
			<code>ctftech{hello-world}}</code>
	===Links===		===Links===
	*[[CTF Challenges \| Back to CTF Challenges page]]		*[[CTF Challenges \| Back to CTF Challenges page]]

Exf: Created page with "===Description=== ===Question=== ===Solution=== ===Tools=== ===Flag=== ===Links=== * Back to CTF Challenges page"

2022-09-26T12:42:58Z

Created page with "===Description=== ===Question=== ===Solution=== ===Tools=== ===Flag=== ===Links=== * Back to CTF Challenges page"

New page

===Description===

===Question===

===Solution===

===Tools===

===Flag===

===Links===
*[[CTF Challenges | Back to CTF Challenges page]]