0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

More than 5 years have passed since last update.

ksnctf Q8 Basic is secure?

Last updated at Posted at 2019-10-06

問題

ファイル

なし

解答(フラグ)

FLAG_5ux7zK2NKSH8fSGA

方針

タイトルからBasic認証をBASE64デコードすると予想。

解説

pcapファイルが置いてあるため、WireSharkで読もうとしたが、クリックしたらブラウザで文字列として、開けてしまったので、Basic認証っぽいリクエストヘッダを探す。
すると、Authorization: Basic cTg6RkxBR181dXg3eksyTktTSDhmU0dBというヘッダを発見。
cTg6RkxBR181dXg3eksyTktTSDhmU0dBの部分をPythonコードでBASE64デコードするとパスワードとしてフラグが出てくる.

ソルバ

base64_decode.py
import base64

auth = "cTg6RkxBR181dXg3eksyTktTSDhmU0dB"
auth_decode = base64.b64decode(auth)
print(auth_decode)

リンク集

0
0
1

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
0
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?