-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathindex.html
506 lines (393 loc) · 43.5 KB
/
index.html
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<meta name="pinterest" content="nopin">
<meta name="viewport" content="width=device-width,minimum-scale=1,initial-scale=1">
<meta name="theme-color" content="#263238">
<meta name="generator" content="Hugo 0.18.1" />
<link rel="apple-touch-icon" href="http://vintersnow.github.io/images/logo.png">
<link rel="alternate" type="application/rss+xml" title="RSS" href="http://vintersnow.github.io/index.xml">
<link rel="canonical" href="http://vintersnow.github.io/">
<link href="http://fonts.googleapis.com/css?family=Open+Sans:400,400italic,600,600italic,700,700italic" rel="stylesheet">
<link href="//maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css" rel="stylesheet">
<link rel="stylesheet" href="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css">
<link rel="stylesheet" href="//cdnjs.cloudflare.com/ajax/libs/highlight.js/8.4/styles/solarized_dark.min.css">
<title>vintersnow's page</title>
<style>
html { font-size: 18px;}@media (max-width: 768px) { html { font-size: 15px; }}body { font-family: 'Noto Sans','Hiragino Kaku Gothic Pro',メイリオ,Meiryo,sans-serif; font-size: inherit; font-weight: 300; line-height: 1rem; background-color: #eceff1;}p { margin: 0;}a { color: #4caf50;}a:hover { text-decoration: none; color: #388e3c;}ul,ol { margin: 0; padding: 0;}h1, h2, h3, h4, h5, h6 { margin: 0; font-weight: 700;}h1 { font-size: 1.8rem; line-height: 2rem; margin: 1.5rem 0; }h2 { font-size: 1.4rem; line-height: 2rem; margin: 1.5rem 0; }h3 { font-size: 1.2rem; line-height: 1.5rem; margin: 1.5rem 0; }h4, h5, h6 { font-size: 1rem; line-height: 1.5rem; margin: 1.5rem 0; }main { display: block;}.content-inner { padding: 1rem 2rem;}.content-inner.thin { padding: .5rem 1rem;}@media (max-width: 768px) { .content-inner { padding: 1rem; }}/* Override */.container { position: relative;}/* Parts:layouts */.l-header { background-color: #fff; margin-bottom: 1rem; padding: 1rem 0; text-align: center;}.l-footer { font-size: .8rem; padding: 1.5rem 0;}/* Parts:menu */.p-menu { position: absolute; right: 15px; top: 0;}/* Parts:terms */.p-terms { list-style: none;}.p-terms .terms-title { margin: 0;}.p-terms a { display: inline-block; padding: .25rem 0;}.p-terms.inline li { display: inline-block; font-size: .8rem;}.p-terms.inline li::after { content: ',';}.p-terms.inline li:last-child::after { content: '';}/* Parts:paging */.p-paging { margin-bottom: 1.5rem; text-align: center;}.p-paging a { display: inline-block; padding: 1rem 1.5rem; margin: 0 .5rem; background-color: #cfd8dc; color: #263238;}/* Parts:section */section { margin-bottom: 1.5rem;}section>header { font-size: .8rem; font-weight: 700; margin-bottom: .5rem; text-transform: uppercase;}section>header a { color: #333; text-decoration: underline;}section.article-footer { margin-bottom: 1rem;}section.article-footer>header { margin-bottom: 0;}/* Parts:share */.p-share { min-width: 100%; margin-bottom: 1.5rem;}.p-share .share-inner { display: table; table-layout: fixed; width: 100%; border-spacing: .25rem;}.p-share a { display: table-cell; text-align: center; font-weight: 700; font-size: .7rem; padding: .5rem 0; color: #fff; border-radius: 5px;}.p-share a.ht { background-color: #00a4de; border-bottom: 2px solid #0083b1; }.p-share a.fb { background-color: #3b5998; border-bottom: 2px solid #2f4779; }.p-share a.tw { background-color: #1da1f2; border-bottom: 2px solid #1780c1; }.p-share a.gp { background-color: #dd4b39; border-bottom: 2px solid #b03c2d; }.p-share a.ln { background-color: #00c300; border-bottom: 2px solid #009c00; }.p-share a.ht::before { content: 'Hatena'; }.p-share a.fb::before { content: 'Facebook'; }.p-share a.tw::before { content: 'Twitter'; }.p-share a.gp::before { content: 'Google+'; }.p-share a.ln::before { content: 'LINE'; }/* Parts:logo */.h-logo { font-family: 'Montserrat', sans-serif;}.p-logo { display: inline-block; text-transform: uppercase;}.p-logo a { display: inline-block; font-size: 1.4rem; line-height: 2rem; color: #000;}/* Parts:crumb */.p-crumb ol { list-style: none; margin-bottom: 1rem;}.p-crumb li { display: inline; margin-right: .25rem; font-size: .8rem; color: #607d8b;}.p-crumb li::after { content: '/'; margin-left: .25rem;}.p-crumb li:last-child::after { content: '';}/* Parts:facts */.p-facts { list-style: none; font-size: .8rem; margin-bottom: 1rem;}.p-facts li { display: inline-block; margin-right: .5rem; color: #90a4ae;}.p-facts li i { margin-right: .5rem; color: #cfd8dc;}/* Parts:article */article { background-color: #fff;}article .title { margin: 0; margin-bottom: .5rem; font-weight: 700;}article .title a { color: #000;}article .thumb { display: block; background-image: url(http://vintersnow.github.io/images/default.jpg); background-position: center; background-size: cover;}article .summary { margin-bottom: .5rem; max-height: 5rem; overflow: hidden;}article.single .thumb { height: 18rem; margin-bottom: 1rem;}@media (max-width: 768px) { article.single .thumb { height: 12rem; }}article.li { margin-bottom: 1rem;}article.li .thumb { height: 7.5rem; margin-bottom: .5rem;}article.li.sm { background-color: transparent; margin-bottom: .5rem;}article.li.sm>header { padding: .5rem 0;}article.li.sm .title { font-size: .8rem; line-height: 1rem; margin-bottom: .25rem;}article.li.sm .p-facts { font-size: .6rem; margin-bottom: 0;}article.li.sm .thumb { float: left; margin-right: .5rem; height: 3rem; width: 3rem;}.article-body h2 { padding: 1rem 0; border-bottom: 2px solid #eceff1;}.article-body h2:first-child { margin-top: 0; }.article-body h3 { color: #428bca;}.article-body h4 { border-left: solid .25rem #428bca; padding: 0 .5rem;}.article-body p { margin: 1.5rem 0; line-height: 1.5rem;}.article-body a { text-decoration: underline;}.article-body ul,.article-body ol { padding-left: 1.5rem;}.article-body code { display: inline-block; font-family: Menlo, consolas, monospace; font-size: .8rem; padding: 0 .5rem; line-height: 1.5rem;}.article-body pre { margin: 1.5rem 0; padding: 0; font-size: .8rem; border: none; border-radius: 0;}.article-body pre code { display: block; line-height: 1rem; padding: 1rem;}.article-body blockquote { margin: 1.5rem 0; padding: .5rem 0; font-size: .8rem; border-top: 1px solid #eceff1; border-bottom: 1px solid #eceff1; color: #607d8b;}.article-body blockquote p { margin: .5rem 0; line-height: 1rem;}.article-body strong { box-shadow: 0 -.5rem 0 0 #90caf9 inset;}.article-body em { font-style: normal; font-weight: 700; color: #03a9f4;}.article-body figure { margin: 1.5rem 0; }.article-body figure img { max-width: 100%; }.article-body figure.left,.article-body figure.right { width: 15rem; height: 12rem; margin-top: 0;}.article-body figure.left { float: left; margin-right: 1rem; }.article-body figure.right { float: right; margin-left: 1rem; }@media (max-width: 768px) { .article-body figure.left, .article-body figure.right { float: none; margin: 0; width: auto; height: auto; }}.article-body figcaption { padding: .5rem 0; font-size: .8rem; text-align: center;}.article-body figcaption a { color: #263238;}
body { font-family: Avenir , 'Open Sans' , 'Helvetica Neue' , Helvetica , Arial , Verdana , Roboto , '游ゴシック' , 'Yu Gothic' , '游ゴシック体' , 'YuGothic' , 'ヒラギノ角ゴ Pro W3' , 'Hiragino Kaku Gothic Pro' , 'Meiryo UI' , 'メイリオ' , Meiryo , 'MS Pゴシック' , 'MS PGothic' , sans-serif; }
</style>
</head>
<body>
<script>
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]||function(){
(i[r].q=i[r].q||[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o),
m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m)
})(window,document,'script','//www.google-analytics.com/analytics.js','ga');
ga('create', 'UA-88436028-1', 'auto');
ga('send', 'pageview');
</script>
<header class="l-header">
<div class="container">
<div class="p-logo">
<a href="http://vintersnow.github.io/" class="h-logo">vintersnow's page</a>
</div>
</div>
</header>
<main>
<div class="container">
<div class="row">
<div class="col-md-8">
<div class="row">
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/post/aws_education/" class="thumb" style="background-image: url(http://vintersnow.github.io/static/images/post/aws-educate-formazione.png);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/post/aws_education/">AWS educationに登録した</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2017-01-20T18:41:07JST">Jan 20, 2017</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/post/">post</a></li>
</ul>
<div class="summary">学生用のディスカウントがこんなにあるとは知らなかった。
今回、AWS EducationというAmazon Web Serviceの学生特典に登録してみた。
AWS Education 出来ること 一番重要なのは100(40)ドルのクレジットだろう。 加盟校の一覧はここ
登録 事前に必要なもの 学校のメールアドレス AWSアカウント https://aws.amazon.com/jp/education/awseducate/
上記のリンクから「AWS Educateに今すぐ参加する」をクリック
あとは流れに沿って埋めていく。
途中AWSアカウント IDが必要となるがこれはAWSのコンソールで確認可能。
登録が成功したらこんなメールが来る。
Credit Codeというのが書いてあるので、AWSコンソールからアカウント->クレジットに進みプロモーションコードを入力すればクレジットがもらえる。
使い過ぎて料金を請求されないように注意しよう。</div>
</div>
</article>
</div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_digest_is_secure/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_digest_is_secure/">ksnctf: #9 digest is secure!</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-30T23:35:12JST">Dec 30, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 http://ksnctf.sweetduet.info/q/9/q9.pcap
解法 問題文から分かるようにdigest認証の問題。 basic認証がガバガバだったのと違い、digest認証はもう少し安全。
wikipedia曰く以下のように認証する。
A1 = ユーザ名 “:” realm “:” パスワード
A2 = HTTPのメソッド “:” コンテンツのURI
response = MD5( MD5(A1) “:” nonce “:” nc “:” cnonce “:” qop “:” MD5(A2) )
ユーザーはサーバーからnonce、nc、conce、qopが与えられてresponseを作る。 サーバーはA1を持っているので、responseを作って照合する。
なるほど確かに逆ハッシュが出来ないと厳しそう。
hydraというツールがあるくらいなので出来ないことは無いのだろうが…
と思ってpcapファイルを眺めていると、なんとhtdigestを覗いているではないか!
GET /~q9/htdigest HTTP/1.1 Host: ctfq.sweetduet.info:10080 Connection: keep-alive Authorization: Digest username="q9", realm="secret", nonce="bbKtsfbABAA=5dad3cce7a7dd2c3335c9b400a19d6ad02df299b", uri="/~q9/htdigest", algorithm=MD5, response="d9f18946e5587401c303b34e00a059eb", qop=auth, nc=00000002, cnonce="6945eb2a7ba8cf7f" User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.</div>
</div>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_math2/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_math2/">ksnctf: #17 math2</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T20:56:45JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary"> 問題 How important is modulo arithmetic in cryptography?
Let x = 2748040023408750324411119450523386950660946398855386842074606380418316981389557916980086140301887947706700698930830779678048474531538039134089675000612962004189001422715316147779554460684462041893073445562829316520071658956471592707597247194589999870235577599858641217209525243986680999448565468816434633441308131788183291153809253610695081752296732033298647222814340913466738465892791206393936089466068684809286651197884210187525269355913763182559833600649423167126622527203197940618965341674710993871930168655984019611567024681974446413864111651893113475795042753452042221938667445789706741508160949598322950403760355305740757495122850819958219745478009476321531997688864567881328571570240278649150057863614800304034452842380274161491817926949213762740941829027657311016236224840157689532838274458699038989430527152474540367086746579688987076042252804910459873636444778218434530247647760637770881658596016745610672707638583665201858035977485748775481448417394363801163664632527695106599930657132405666766730530997168969743603771751166591137309462845077320233889570871715682231576283485837079838925927845291565664213349164253238166525895494203520538861102027123057706413048503799598270037162337386882901940037500301040636118696723417952777083334146545991127148023661461455142653367976629308434919237639329808504561590505864983890552051987234096577849288536293631380950881787840319976968198704697701966146561843819563765280293823120028941691560894722032503932540560461794190408016359786029679686957711035845785762377768203676919060935155382104877926736292611130243057909501332528103700463961697932230444978571571548190911155741113324573679444638703192583211952316173122745153529542339170631749363019742630339456502772150867703497326010832217054307087826776870481852284816747574983354077170761286175754243223519482572371717625453405597596790583499145036350302955327521461648262537855645876387858201576107385450844609238327605056916243564458120595540013872075267316304999752934829122583429168665162743589578036716137649553856654996867605565582594039606555708509284616434305172100068285925706963351193710675088846623856567419346569873886366829228933416064828304824833588800700991940600359503453201939139663042787644390810036292415117714919711827630953170559057272633043896443339064006637234499569232762828723613158050896065355005775876910820958296537497557737916521798848004761708690607167573807307291510879396794861418856342383200817566360552405183866698509354047737422523253071467100174078467454351746681775690022510266842064132386305358891086764558955802257688899610117102582837343655907837234028334304769930810792079059216436489942124896722072971246781926084943216581585837400274934104255861076781834022322597318553478829221018993823759479304536464719195824731739557957722610850860725276329731096193041588880149698625007746958307472328762247329346952956782896672291984502790479223886842985800649168009891087704339671376795754679245964575179873102014722210341771266309855717402003098724600141420936602986387680283404929020457247001371544838792904086327642729822000980710278752669990211765608002907900832262843253793831541691706704836397397798869236939393204666502455311086553874765248631328418556164635889080357612074921368044611251307530838475840480894307375072202500636365832958938363048173011687247738236161480446422712858040552310006617829659443118541556912488329721272939472554467384944920030182974546889304443711910957344160175437149714520561879951921970795705645045936350875827028675689840953101114431720413756855193291198455863087675930604549263160397353363504597829924339064422377323361781720524799661393081986371074530022532621955945720583925291264598924971169093688390536693144593482790588893095052569365154072722966434676949346037949263628957665599420417719951187489606010866702371368012263032537375401145460592536898818245350468847674995676417425737655723761467908866712060720593684978725896677308273.
Find the value of y such that y101 = x. The flag is FLAG_y (in decimal notation).
解法 求めるものは自明なので、問題はどうやって解くか。
自分でべき乗を計算する処理を書いても良いのだが、今後同じようなことをしたい時簡単に解けるように楽な方法を探すことにした。
MPFRを使えるgmpy2というライブラリが良さそう。他にsageなどもある。
自分で書くなら2分木探索をしたらいい。
point 881
参考 http://stackoverflow.com/questions/39794338/precise-nth-root </div>
</div>
</article>
</div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_math1/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_math1/">ksnctf_math1</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T20:35:21JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary"> 問題 Let e = 65537,
n = 1517330236262917595314610888889322115651087080826711948897066340883208205571592392362650858571076247939805436226544833224526137582834770402681005343930059463684528957271778199162575053306238099823295117697031968370690372250916935800738698142103275969223264184374648246277564306900886005299731265812255274723175925185522344831066577166867786835955092059346244885587228196357297758371381557924676260190209536670230008561217008649261974735505203813478978893582292682827884118215872470401293272325715864815977064075988643101088355047954735427424641386870772845440782632933485165110172437511822736907550777817722248753671107339823410418938404382732079381329288400012929311347390423061254658780185245562668131009832293474920208834795460061115101364091252176594144096675899952570380792978037217747311595899301451192342027799533264325948876556110474850761538179748318187805312451895898751337975457949549497666542175077894987697085521882531938339334715190663665300179658557458036053188152532948734992896239950564081581184284728802682982779186068791931259198917308153082917381616147108543673346682338045309449569430550618884202465809290850964525390539782080230737593560891353558335337408957948041667929154230334506735825418239563481028126435029, c = me mod n = 225549592628492616152632265482125315868911125659971085929712296366214355608049224179339757637982541542745010822022226409126123627804953064072055667012172681551500780763483172914389813057444669314726404135978565446282309019729994976815925850916487257699707478206132474710963752590399332920672607440793116387051071191919835316845827838287954541558777355864714782464299278036910958484272003656702623646042688124964364376687297742060363382322519436200343894901785951095760714894439233966409337996138592489997024933882003852590408577812535049335652212448474376457015077047529818315877549614859586475504070051201054704954654093482056493092930700787890579346065916834434739980791402216175555075896066616519150164831990626727591876115821219941268309678240872298029611746575376322733311657394502859852213595389607239431585120943268774679785316133478171225719729917877009624611286702010936951705160870997184123775488592130586606070277173392647225589257616518666852404878425355285270687131724258281902727717116041282358028398978152480549468694659695121115046850718180640407034795656480263573773381753855724693739080045739160297875306923958599742379878734638341856117533253251168244471273520476474579680250862738227337561115160603373096699944163. You have succeeded in factorization of n using Shor’s algorithm as follows:
n = pq,
p = 34111525225922333955113751419357677129436029651245533697825114748126342624744832960936498161825269430327019858323450578875242014583535842110912370431931233957939950911741013017595977471949767235426490850284286661592357779825212265055931705799916913817655743434497422993498931394618832741336247426815710164342599150990608143637331068220244525541794855651643135012846039439355101027994945120698530177329829213208761057392236875366458197098507252851244132455996468628957560178868724310000317011912994632328371761486669358065577269198065792981537378448324923622959249447066754504943097391628716371245206444816309511381323, q = 44481453884385518268018625442920628989497457642625668259648790876723318635861137128631112417617317160816537010595885992856520476731882382742220627466006460645416066646852266992087386855491152795237153901319521506429873434336969666536995399866125781057768075533560120399184566956433129854995464893265403724034960689938351450709950699740508459206785093693277541785285699733873530541918483842122691276322286810422297015782658645129421043160749040846216892671031156465364652681036828461619272427318758098538927727392459501761203842363017121432657534770898181975532066012149902177196510416802134121754859407938165610800223.
解法 RSA暗号のNが量子コンピュータで素因数分解出来たという設定。
素因数分解が出来たら後は簡単。
d = e^-1 (mod (p-1)*(q-1))
m = c^d (mod n)
である。
modのインバースや巨大数のべき乗の計算はうまいことしないと計算量が増大するのでライブラリを使うようにした。
pycryptoのnumberは便利なんだけど少し物足りない。numpyやsympyを使ったほうがいいのかな?
point 831
参考 https://ja.wikipedia.org/wiki/RSA%E6%9A%97%E5%8F%B7 </div>
</div>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_proverb/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_proverb/">ksnctf: #13 proverb</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T19:42:07JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 SSH: ctfq.sweetduet.info:10022 ID: q13 Pass: 8zvWx00MakSCQuGq
解法 sshで接続すると以下のようなファイルがあるホームディレクトリに接続する。
[q13@localhost ~]$ ll total 28 -r-------- 1 q13a q13a 22 Jun 1 2012 flag.txt ---s--x--x 1 q13a q13a 14439 Jun 1 2012 proverb -r--r--r-- 1 root root 755 Jun 1 2012 proverb.txt -r--r--r-- 1 root root 151 Jun 1 2012 readme.txt 見ての通りflag.txtはq13aユーザーでしか見れない。 proverbは実行可能で実行するとことわざを出力してくれる。 でこのことわざはproverb.txtにかかれているものと同じみたい。
readme.txtは、
[q13@localhost ~]$ cat readme.txt You are not allowed to connect internet and write the home directory.</div>
</div>
</article>
</div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_john/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_john/">ksnctf: #14 john</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T18:38:01JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 user00:$6$Z4xEy/1KTCW.rz$Yxkc8XkscDusGWKan621H4eaPRjHc1bkXDjyFtcTtgxzlxvuPiE1rnqdQVO1lYgNOzg72FU95RQut93JF6Deo/:15491:0:99999:7::: user01:$6$ffl1bXDBqKUiD$PoXP69PaxTTX.cgzYS6Tlj7UBvstr6JruGctoObFXCr4cYXjIbxBSMiQZiVkKvUxXUC23zP8PUyXjq6qEq63u1:15491:0:99999:7::: user02:$6$ZsJXadT/rv$T/2gVzYwMBaAsZnHIjnUSmTozIF/ebMvtHIJjikFehvB8pvy28DUIQYbTJLG6QAxhzJAKOROnZq0xV4hUGefM1:15491:0:99999:7::: user03:$6$l0NHH5FF0H/U$fPv3c5Cdls/UaZmglR4Qqh8vhpIBsmY1sEjHi486ZcDQ2Vx5GY0fcQYSorWj6l42jfI47w437n.NBm8NArFyT/:15491:0:99999:7::: user04:$6$wAnAP/NMiLa/yE$.gi4r3xYuPTg5z2S59z2EzFbqpmwZYy1tBSVA9/hqTFnWY0tHqXbwL.dFQwHzKTuzXV6WMgjEZlyzUPGzVtPb0:15491:0:99999:7::: user05:$6$jTgFhKHk/$xQIdn7snYAAGvifxC02YLXcAKkiuPbJ3KBkH2Q8BZ12TL2aepaUJotgfKfNSPCXWebyCY/skOmOymok.KIm5D0:15491:0:99999:7::: user06:$6$8LXZt/zPbLtIn1o$ynsZxueG88Kz0vDr3cyK.21cv4GWw9iaW9oYZcmZ9SY5UpMQS1wl2/dbXGyR8WzVBKKP/6k8VYvWuiNQ3We52/:15491:0:99999:7::: user07:$6$jnA8m/S5aU0/$PGrG8mDy.vs3W9xhG1qd56eOEainH9xntY48.duznt989TXMn6J.scOBqp4BWg3fHWxoFgBn26LYvcnqWGcoF1:15491:0:99999:7::: user08:$6$ITB7n/qsP$fmrmItHX9B96PmhsxIX21vdYDvFHiIPnyzRFjWIbcd3y/DRHCm0lzyJEnWlQChdDAiFUFXtqwoTbEdREXQ99M.:15491:0:99999:7::: user09:$6$LpgLJrjPV$6sa0KW08Q10S.C/BSUHlHaQZT5n8uIygZSsWP5drdmuhI7c17wWCK/GEzQS7g8EL//5bqdjo1C90smTDhLEcF1:15491:0:99999:7::: user10:$6$0VSPwOzcL//6QR$RgtMpkfVPb5Cli7cjVE5jMgJlN10xY1R3jxRNrY0l/84R3.NvxP3I8XtkMkonU6DKhge0JGp54DZLQqUN9kL7/:15491:0:99999:7::: user11:$6$zryub/lvSKj7Xl$eazV2fmcJa5M3qMovQqARGK59Qxtfv2zjUJvphKNnyUMVyBn.SjEFhRT/mAjz3QFroNbwmrYLtrpyxjH.q64n/:15491:0:99999:7::: user12:$6$tAkM0dDUFe76d8K/$OnNGFEuIf1seMlLHb.8.y5/cpmBUcMbhLhOfFdd0E/DKASXPS4riB4uz2Fg3om9Atg.g7s.JFoKV0uuJ461KV/:15491:0:99999:7::: user13:$6$0cCdE5Nfqu/HFS$PwnLdS.chtm6qGwf2Uuiko7V3fMwjcQ52M8hslvoReFQ9XOBXw603Ok20VJwWAwR6RNv6adn6a6kuRm5Y3.ge1:15491:0:99999:7::: user14:$6$RgPs7j4eSa/v$71CeLB9Z1Fafi6vi2ou5LzRz5xXWTzvZeZgelnm2przx.JQYp21p8h2BCyTYFd10MKD/cquPvn42vSzlJJJ8Q1:15491:0:99999:7::: user15:$6$1uhGQ/5DwMp/$UjYTEVaChEzmUITvWpaZVvYYDLBULpI4IEyieClSsyC2NHwEnaDx6xwtUVpQPxEhi6R7OQhX68Oo5CfilYqDQ.:15491:0:99999:7::: user16:$6$V/InSacMp8U$UpDgdL/GS/kdFmn1rO97YkLAeTgofu4fDVUGoV1PWnVFxUtVyx24ix5hJp53FkBuqdzmXgwGcb6MU5AWJWjaB1:15491:0:99999:7::: user17:$6$d6mWSrE8vxDe$UqTgKPfKxm0/Aboz8DeFNNiZsFBYyE6iGpqUzSX4UpWSDfXt1DERBtI29H2Gz5q.6ls3730naAo31wAacvs/L0:15491:0:99999:7::: user18:$6$ulcKu/ddomcNGRJj$i8XB1D4YtLGbAHX0XHX88ObUWw8dQsrTqoliGAU//zGHNLmLeWd.4k5YHViNSy3rlGTQSRPtutlKnub8aRnzy0:15491:0:99999:7::: user19:$6$cVnhE9CwfSIIA$wrn6p3cgfz.JOc6KVkieNCtc.FzkjUdcDDlivn0APnYv9/z4tt7hUpPft5T8kMmnx/hiF92vjnDxcauVyQySp.:15491:0:99999:7::: user20:$6$2Pg2VxXg$K8AqsCMPAFiXSxNjETBWqEHQom9Q5dDIz9/nItxpQatrG9gvv9CRJP3kQzKLbRf13FxfOXpeEYIpOEK.2i1HP0:15491:0:99999:7::: user99:$6$SHA512IsStrong$DictionaryIsHere.http//ksnctf.sweetduet.info/q/14/dicti0nary_8Th64ikELWEsZFrf.txt:15491:0:99999:7:::
解法 調べてみるとlinuxのユーザーパスワードだと分かる。/etc/shadowで調べたら出てくる。
:で各フィールドが区切られていて、第一フィールドがユーザー名、第二フィールドがパスワードのハッシュである。 $6$なのでハッシュ方式はsha2だ。
johnという名前からjohn the ripperという有名なパスワードクラッキングツールを使うのだろう。 辞書ファイルをどうしようかと思ったが、幸いなことに最後の行にこう書かれている。
$6$SHA512IsStrong$DictionaryIsHere.http//ksnctf.sweetduet.info/q/14/dicti0nary_8Th64ikELWEsZFrf.txt
辞書をダウンロードしてきてjohn the ripperを試す。
[vagrant@kali] ~/projects/ctf/ksnctf/16 # $ /usr/sbin/john --wordlist=dicti0nary_8Th64ikELWEsZFrf.txt shadow ... HELD (user10) ADDITIONAL (user02) QUESTION (user16) SPIRITS (user06) DELIGHT (user20) __________ (user04) GENDER (user03) FREQUENT (user00) SUFFERS (user11) zecht (user14) applies (user05) LATTER (user01) LEAVE (user12) .</div>
</div>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_reserved/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_reserved/">ksnctf: #25 reserved</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T15:48:37JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 length q chr uc and print chr ord uc qw q flock q and print chr oct ord q or no and print chr ord uc q each ne and print chr ord uc qw q gt q and print chr oct hex ord uc q my m and print chr ord uc q each ne and print chr ord qw q sin q and print chr oct ord uc q each le and print chr length q q splice srand getservbyname setnetent ne reset endprotoent foreach scalar rewinddir cos setnetent not else getprotobyname q and print chr ord qw q ge q and print chr ord uc q eval le and print chr ord uc qw q sin q and print chr ord uc qw q no q and print chr ord qw q use q and print chr ord q mkdir m and print chr ord q each le and print chr ord q pop and print chr oct ord q open no and print chr ord q eval le and print chr ord q eval le and print chr oct hex ord uc q gt log and print chr ord q q eq and print chr ord q q eq and print chr ord q q q and print chr ord qq q q and print chr ord uc q lt eval and print chr ord q chr lc and print chr ord q map m and print chr ord qw q ne q and print chr ord q mkdir m and print chr ord q q q and print chr ord q my alarm and print chr ord q pop and print chr ord qw q uc q and print chr oct oct ord uc qw q bind q and print chr ord q q eq and print chr ord q split s and print chr ord q open do and print chr ord q ge log and print chr ord qw q not q and print chr ord q oct no and print chr ord q xor x and print chr ord qw q die q and print chr ord q ne sin and print chr oct oct ord uc qw q fork q</div>
</div>
</article>
</div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_basic_is_secure/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_basic_is_secure/">ksnctf: #8 basic is secure?</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-27T21:55:08JST">Dec 27, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 http://ksnctf.sweetduet.info/q/8/q8.pcap
解法 basicと言っているのでベーシック認証なのだろう。
pcapファイルをwiresharkで開く。 2回分の通信しかない短い記録なので上から見ていく。 二つ目のTCPストリームを見るとbasic 認証を通っているのが分かる。
GET /~q8/ HTTP/1.1 Host: ctfq.sweetduet.info:10080 Connection: keep-alive Authorization: Basic cTg6RkxBR181dXg3eksyTktTSDhmU0dB User-Agent: Mozilla/5.0 (Windows NT 5.1) AppleWebKit/535.19 (KHTML, like Gecko) Chrome/18.0.1025.162 Safari/535.19 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8 Accept-Encoding: gzip,deflate,sdch Accept-Language: ja,en-US;q=0.8,en;q=0.6 Accept-Charset: Shift_JIS,utf-8;q=0.7,*;q=0.3 HTTP/1.1 200 OK Date: Sat, 26 May 2012 20:54:05 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Sat, 26 May 2012 12:24:46 GMT ETag: "422da-b8-4c0ef920b3f8e" Accept-Ranges: bytes Content-Length: 184 Connection: close Content-Type: text/html; charset=UTF-8 <!</div>
</div>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_shebang/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_shebang/">ksnctf #10 #!</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-27T21:45:46JST">Dec 27, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 What’s this?
↓ #!/usr/bin/python print "Hello world" The flag is FLAG_S?????? (in capital letters).
解法 shellscriptの先頭にあるおまじないの名称。 ググり力が試される。
「shellscript 先頭」で調べたら出て来た。
https://moneyforward.com/engineers_blog/2015/05/21/bash-script-tips/ flag FLAG_SHEBANG point 471</div>
</div>
</article>
</div>
<div class="col-sm-6 col-xs-12"><article class="li">
<a href="http://vintersnow.github.io/ctf/ksnctf_programing/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<div class="content-inner thin">
<h2 class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_programing/">ksnctf: #7 programing</a></h2>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-27T12:27:36JST">Dec 27, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
<div class="summary">問題 http://ksnctf.sweetduet.info/q/7/program.cpp
解法 c++コードが渡される。 インデントが崩れていて読めないけど、コンパイルは通る。 実行するとFROG_This_is_wrong_:(となった。
で、実はこれC++ではなくてwhitespaceという言語。 覚えていたからいいけど、初見だと分からないと思う。スペースとタブが混じっているところから気づくのかな?
まあ分かってしまえばインタプリタを探して実行するだけなんだけど、このインタプリタがなかなか見つからない! いやいっぱいあるんだけどまともに動くのがない。 とりあえずいかのものがまともに動いた。
https://github.com/hostilefork/whitespacers のC言語版 http://ws2js.luilak.net/interpreter.html https://whitespace.kauaveel.ee/ 実行するとPINコードを求められる。
PIN: 一番最後のインタプリタはアセンブリぽいコードを表示してくれてさらにステップ実行出来るのでこれで見ると、PINが33355524だと分かる。 入力するとflagが出て来た。
flag FLAG_EmTx6FTbGLieiMcA point 451</div>
</div>
</article>
</div>
<div class="col-sm-12"></div>
</div>
<nav class="p-paging">
<a href="/page/2/" rel="next" class="next">Next</a>
</nav>
</div>
<div class="col-md-4">
<aside class="site">
<section>
<header>latests</header>
<div>
<div class="row">
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/post/aws_education/" class="thumb" style="background-image: url(http://vintersnow.github.io/static/images/post/aws-educate-formazione.png);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/post/aws_education/">AWS educationに登録した</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2017-01-20T18:41:07JST">Jan 20, 2017</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/post/">post</a></li>
</ul>
</header>
</article>
</div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_digest_is_secure/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_digest_is_secure/">ksnctf: #9 digest is secure!</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-30T23:35:12JST">Dec 30, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_math2/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_math2/">ksnctf: #17 math2</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T20:56:45JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_math1/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_math1/">ksnctf_math1</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T20:35:21JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_proverb/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_proverb/">ksnctf: #13 proverb</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T19:42:07JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_john/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_john/">ksnctf: #14 john</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T18:38:01JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_reserved/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_reserved/">ksnctf: #25 reserved</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-29T15:48:37JST">Dec 29, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_basic_is_secure/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_basic_is_secure/">ksnctf: #8 basic is secure?</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-27T21:55:08JST">Dec 27, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-sm-12"></div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_shebang/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_shebang/">ksnctf #10 #!</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-27T21:45:46JST">Dec 27, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-md-12 col-sm-6 col-xs-12"><article class="li sm">
<a href="http://vintersnow.github.io/ctf/ksnctf_programing/" class="thumb" style="background-image: url(http://vintersnow.github.io/images/geek/ctf.jpg);"></a>
<header>
<div class="title"><a href="http://vintersnow.github.io/ctf/ksnctf_programing/">ksnctf: #7 programing</a></div>
<ul class="p-facts">
<li><i class="fa fa-calendar" aria-hidden="true"></i><time datetime="2016-12-27T12:27:36JST">Dec 27, 2016</time></li>
<li><i class="fa fa-bookmark" aria-hidden="true"></i><a href="http://vintersnow.github.io/ctf/">ctf</a></li>
</ul>
</header>
</article>
</div>
<div class="col-sm-12"></div>
</div>
</div>
</section>
<section>
<header>category</header>
<div>
<ul class="p-terms">
</ul>
</div>
</section>
<section>
<header>tag</header>
<div>
<ul class="p-terms">
<li><a href="http://vintersnow.github.io/tags/it">it</a></li><li><a href="http://vintersnow.github.io/tags/ctf">ctf</a></li><li><a href="http://vintersnow.github.io/tags/ksnctf">ksnctf</a></li><li><a href="http://vintersnow.github.io/tags/aws">aws</a></li><li><a href="http://vintersnow.github.io/tags/game">game</a></li><li><a href="http://vintersnow.github.io/tags/student">student</a></li>
</ul>
</div>
</section>
</aside>
</div>
</div>
</div>
</main>
<footer class="l-footer">
<div class="container">
<p><span class="h-logo">© vintersnow's page</span></p>
<aside>
<p>Powered by <a href="https://gohugo.io/">Hugo</a>.</p>
<p><a href="https://github.com/dim0627/hugo_theme_robust">Robust</a> designed by <a href="http://yet.unresolved.xyz/">Daisuke Tsuji</a>.</p>
</aside>
</div>
</footer>
<script src="//code.jquery.com/jquery-3.1.1.min.js"></script>
<script src="//maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
<script src="//cdnjs.cloudflare.com/ajax/libs/highlight.js/8.4/highlight.min.js"></script>
<script>hljs.initHighlightingOnLoad();</script>
</body>
</html>