{"id":109,"date":"2021-05-23T16:33:09","date_gmt":"2021-05-23T07:33:09","guid":{"rendered":"https:\/\/rakuha.com\/?p=109"},"modified":"2021-05-23T16:38:26","modified_gmt":"2021-05-23T07:38:26","slug":"seccon-beginners-ctf-2021-writeup","status":"publish","type":"post","link":"https:\/\/rakuha.com\/?p=109","title":{"rendered":"SECCON Beginners CTF 2021 writeup"},"content":{"rendered":"\n<p>\u53c2\u52a0\u3057\u3066\u304d\u307e\u3057\u305f\u3002<br>Welcome\u542b\u3081\u30667\u554f\u89e3\u304d\u307e\u3057\u305f\u3002\u3082\u3046\u3061\u3087\u3063\u3068\u3044\u3051\u305f\u306a\u30fc\u3068\u601d\u3044\u307e\u3059\u3002\u3082\u3046\u5c11\u3057\u9811\u5f35\u308d\u3046\u3002\u3002\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_82_2 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\"><p class=\"ez-toc-title\" style=\"cursor:inherit\">\u76ee\u6b21<\/p>\n<\/div><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/rakuha.com\/?p=109\/#Web_osoba\" >[Web] osoba<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/rakuha.com\/?p=109\/#Web_Werewolf\" >[Web] Werewolf<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/rakuha.com\/?p=109\/#Web_check_url\" >[Web] check_url<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/rakuha.com\/?p=109\/#Web_cant_use_db\" >[Web] cant_use_db<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/rakuha.com\/?p=109\/#misc_git-leak\" >[misc] git-leak<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/rakuha.com\/?p=109\/#reversing_only_read\" >[reversing] only_read<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/rakuha.com\/?p=109\/#%E3%81%95%E3%81%84%E3%81%94%E3%81%AB\" >\u3055\u3044\u3054\u306b<\/a><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Web_osoba\"><\/span>[Web] osoba<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"316\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image.png?resize=900%2C316&#038;ssl=1\" alt=\"\" class=\"wp-image-110\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image.png?resize=1024%2C359&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image.png?resize=300%2C105&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image.png?resize=768%2C269&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image.png?resize=800%2C281&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image.png?w=1183&amp;ssl=1 1183w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>HTML\u306e\u30bd\u30fc\u30b9\u3092\u898b\u308b\u3068\u3001\u30da\u30fc\u30b8\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u30af\u30a8\u30ea\u30d1\u30e9\u30e1\u30fc\u30bf\u3067\u6307\u5b9a\u3057\u3066\u3044\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"756\" height=\"302\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-1.png?resize=756%2C302&#038;ssl=1\" alt=\"\" class=\"wp-image-111\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-1.png?w=756&amp;ssl=1 756w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-1.png?resize=300%2C120&amp;ssl=1 300w\" sizes=\"auto, (max-width: 756px) 100vw, 756px\" \/><\/figure>\n\n\n\n<p>\u305d\u3093\u306a\u308f\u3051\u3067\u3001<code>https:\/\/osoba.quals.beginners.seccon.jp\/?page=..\/flag<\/code> \u3068\u30a2\u30af\u30bb\u30b9\u3057\u3066\u307f\u308b\u3068\u30d5\u30e9\u30b0\u30b2\u30c3\u30c8\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Web_Werewolf\"><\/span>[Web] Werewolf<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"367\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-2.png?resize=900%2C367&#038;ssl=1\" alt=\"\" class=\"wp-image-112\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-2.png?resize=1024%2C418&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-2.png?resize=300%2C122&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-2.png?resize=768%2C313&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-2.png?resize=800%2C327&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-2.png?w=1475&amp;ssl=1 1475w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u8a66\u3057\u306b\u3084\u3063\u3066\u307f\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"631\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-3.png?resize=900%2C631&#038;ssl=1\" alt=\"\" class=\"wp-image-113\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-3.png?resize=1024%2C718&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-3.png?resize=300%2C210&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-3.png?resize=768%2C539&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-3.png?resize=800%2C561&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-3.png?w=1062&amp;ssl=1 1062w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>app.py\u3092\u898b\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u3002<code>player.__dict__[k] = v<\/code> \u306b\u5bfe\u3057\u3066role\u3092\u66f8\u304d\u63db\u3048\u308b\u3088\u3046\u306a\u30d1\u30e9\u30e1\u30fc\u30bf\u3092\u5165\u308c\u308c\u3070\u3044\u3044\u3068\u601d\u3063\u305f\u3051\u3069\u3001role\u3084__role\u3092\u6307\u5b9a\u3057\u3066\u3082\u3046\u307e\u304f\u3044\u304b\u306a\u3044\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"703\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-4.png?resize=900%2C703&#038;ssl=1\" alt=\"\" class=\"wp-image-114\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-4.png?resize=1024%2C800&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-4.png?resize=300%2C234&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-4.png?resize=768%2C600&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-4.png?resize=800%2C625&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-4.png?w=1257&amp;ssl=1 1257w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p> \u8a66\u3057\u306b <code>player.__dict__<\/code> \u3092\u8868\u793a\u3057\u3066\u307f\u308b\u3088\u3046\u306a\u30bd\u30fc\u30b9\u3092\u66f8\u3044\u3066\u3001\u5b9f\u884c\u3057\u3066\u307f\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"631\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-5.png?resize=900%2C631&#038;ssl=1\" alt=\"\" class=\"wp-image-115\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-5.png?resize=1024%2C718&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-5.png?resize=300%2C210&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-5.png?resize=768%2C539&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-5.png?resize=800%2C561&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-5.png?w=1148&amp;ssl=1 1148w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u306a\u308b\u307b\u3069\u3002 <code>_Player__role<\/code> \u3068\u5165\u308c\u308c\u3070\u3044\u3044\u306e\u304b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"719\" height=\"123\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-6.png?resize=719%2C123&#038;ssl=1\" alt=\"\" class=\"wp-image-116\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-6.png?w=719&amp;ssl=1 719w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-6.png?resize=300%2C51&amp;ssl=1 300w\" sizes=\"auto, (max-width: 719px) 100vw, 719px\" \/><\/figure>\n\n\n\n<p>\u3068\u3044\u3046\u308f\u3051\u3067_Player__role\u3068\u3044\u3046\u30d1\u30e9\u30e1\u30fc\u30bf\u540d\u3067WEREWOLF\u3092\u9001\u308c\u3070OK\u3002<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Web_check_url\"><\/span>[Web] check_url<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>\u30b5\u30fc\u30d0\u306bURL\u3092\u6e21\u3059\u3068\u3001\u305d\u3053\u306b\u5bfe\u3057\u3066curl\u3067\u30a2\u30af\u30bb\u30b9\u3057\u3066\u304f\u308c\u308b\u3089\u3057\u3044\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"398\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-8.png?resize=900%2C398&#038;ssl=1\" alt=\"\" class=\"wp-image-118\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-8.png?resize=1024%2C453&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-8.png?resize=300%2C133&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-8.png?resize=768%2C340&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-8.png?resize=800%2C354&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-8.png?w=1351&amp;ssl=1 1351w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>index.php\u3092\u898b\u308b\u3068\u3001\u81ea\u5206\u81ea\u8eab\u304b\u3089\u30a2\u30af\u30bb\u30b9\u304c\u304f\u308b\u3068\u30d5\u30e9\u30b0\u3092\u6e21\u3057\u3066\u304f\u308c\u308b\u3068\u306e\u3053\u3068\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"546\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-7.png?resize=900%2C546&#038;ssl=1\" alt=\"\" class=\"wp-image-117\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-7.png?w=1021&amp;ssl=1 1021w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-7.png?resize=300%2C182&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-7.png?resize=768%2C466&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-7.png?resize=800%2C485&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>URL\u306e\u8868\u73fe\u306e\u5f62\u5f0f\u306f\u3044\u308d\u3044\u308d\u3042\u308b\u306e\u3067\u3001\u4ee5\u4e0b\u306e\u30b5\u30a4\u30c8\u3092\u53c2\u8003\u306b\u3057\u3066\u307f\u305f\u3002<br>http:\/\/www.rtpro.yamaha.co.jp\/RT\/docs\/ip-address.php<\/p>\n\n\n\n<p>10\u9032\u6570\u3060\u3068\u3046\u307e\u304f\u3044\u304b\u306a\u3044&#8230;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"548\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-9.png?resize=900%2C548&#038;ssl=1\" alt=\"\" class=\"wp-image-119\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-9.png?resize=1024%2C623&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-9.png?resize=300%2C182&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-9.png?resize=768%2C467&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-9.png?resize=800%2C486&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-9.png?w=1209&amp;ssl=1 1209w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>16\u9032\u306a\u3089\u3044\u3051\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"715\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-10.png?resize=900%2C715&#038;ssl=1\" alt=\"\" class=\"wp-image-120\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-10.png?resize=1024%2C814&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-10.png?resize=300%2C238&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-10.png?resize=768%2C610&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-10.png?resize=800%2C636&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-10.png?w=1174&amp;ssl=1 1174w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Web_cant_use_db\"><\/span>[Web] cant_use_db<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"617\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?resize=900%2C617&#038;ssl=1\" alt=\"\" class=\"wp-image-121\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?resize=1024%2C702&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?resize=300%2C206&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?resize=768%2C526&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?resize=1536%2C1053&amp;ssl=1 1536w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?resize=800%2C548&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-11.png?w=1679&amp;ssl=1 1679w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u3069\u3046\u3084\u3089Noodles2\u3064\u3068Soup1\u3064\u3092Buy\u3057\u305f\u3042\u3068\u3001Flag\u3092\u62bc\u305b\u3070\u30b2\u30c3\u30c8\u3067\u304d\u308b\u3089\u3057\u3044\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"784\" height=\"755\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-12.png?resize=784%2C755&#038;ssl=1\" alt=\"\" class=\"wp-image-122\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-12.png?w=784&amp;ssl=1 784w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-12.png?resize=300%2C289&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-12.png?resize=768%2C740&amp;ssl=1 768w\" sizes=\"auto, (max-width: 784px) 100vw, 784px\" \/><\/figure>\n\n\n\n<p>\u30c6\u30ad\u30b9\u30c8\u3092\u958b\u3044\u3066\u305d\u3053\u306b\u91d1\u984d\u3092\u66f8\u304d\u8fbc\u3093\u3067\u3044\u308b\u306e\u3067\u3001\u8907\u6570\u540c\u6642\u306b\u5b9f\u884c\u3059\u308c\u3070\u3088\u3044\u3089\u3057\u3044\u3002<br>\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u66f8\u3044\u3066buy_noodles\u3068buy_soup\u306b\u5bfe\u3057\u3066\u4e26\u884c\u3067\u30a2\u30af\u30bb\u30b9\u3057\u3001\u30d5\u30e9\u30b0\u30b2\u30c3\u30c8\uff01<br><br>\uff08\u4ed6\u306e\u4eba\u306ewriteup\u898b\u3066\u305f\u3089\u666e\u901a\u306b\u7d20\u65e9\u304f\u30dc\u30bf\u30f3\u3092\u62bc\u305b\u3070\u30d5\u30e9\u30b0\u304c\u30b2\u30c3\u30c8\u3067\u304d\u308b\u3068\u306e\u3053\u3068&#8230;\u306a\u3093\u3068\u3002\uff09<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"misc_git-leak\"><\/span>[misc] git-leak<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"272\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-13.png?resize=900%2C272&#038;ssl=1\" alt=\"\" class=\"wp-image-123\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-13.png?resize=1024%2C310&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-13.png?resize=300%2C91&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-13.png?resize=768%2C233&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-13.png?resize=800%2C242&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-13.png?w=1199&amp;ssl=1 1199w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>\u53d6\u5f97\u3057\u305f\u30ea\u30dd\u30b8\u30c8\u30ea\u306e <code>.git\/logs\/HEAD<\/code> \u3092\u307f\u3066\u3001\u602a\u3057\u305d\u3046\u306a\u3084\u3064\u3092git diff\u3057\u3066\u307f\u308b\u3068\u3042\u3063\u305f\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"289\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=900%2C289&#038;ssl=1\" alt=\"\" class=\"wp-image-124\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=1024%2C329&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=300%2C96&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=768%2C247&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=1536%2C493&amp;ssl=1 1536w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=2048%2C657&amp;ssl=1 2048w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?resize=800%2C257&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-14.png?w=1800&amp;ssl=1 1800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"reversing_only_read\"><\/span>[reversing] only_read<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"230\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-15.png?resize=900%2C230&#038;ssl=1\" alt=\"\" class=\"wp-image-125\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-15.png?resize=1024%2C262&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-15.png?resize=300%2C77&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-15.png?resize=768%2C196&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-15.png?resize=800%2C205&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-15.png?w=1185&amp;ssl=1 1185w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p>ghidra\u52d5\u304b\u305d\u3046\u3068\u3057\u305f\u3089\u74b0\u5883\u304c\u6574\u3063\u3066\u3044\u306a\u304b\u3063\u305f\u306e\u3067\u3001\u30b5\u30af\u30c3\u3068objdump\u3057\u305f\u3089\u3053\u3093\u306a\u611f\u3058\u3002\u6bd4\u8f03\u3057\u3066\u3044\u308b\u90e8\u5206\u3092\u8aad\u3093\u3067\u3044\u304f\u3068ctf4b{\u304b\u3089\u59cb\u307e\u3063\u3066\u3044\u308b\u306e\u3067\u3001\u3053\u308c\u3092\u9811\u5f35\u3063\u3066\u8aad\u3093\u3060\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"823\" height=\"1024\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-16.png?resize=823%2C1024&#038;ssl=1\" alt=\"\" class=\"wp-image-126\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-16.png?resize=823%2C1024&amp;ssl=1 823w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-16.png?resize=241%2C300&amp;ssl=1 241w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-16.png?resize=768%2C956&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-16.png?resize=800%2C996&amp;ssl=1 800w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2021\/05\/image-16.png?w=912&amp;ssl=1 912w\" sizes=\"auto, (max-width: 823px) 100vw, 823px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"%E3%81%95%E3%81%84%E3%81%94%E3%81%AB\"><\/span>\u3055\u3044\u3054\u306b<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p>Web\u554f\u306ejson\u3082\u60dc\u3057\u3044\u3068\u3053\u308d\u307e\u3067\u3044\u3063\u305f\u308a\u3001magic\u3082\u3042\u308b\u7a0b\u5ea6\u65b9\u5411\u6027\u306f\u3042\u3063\u3066\u3044\u305f\u306e\u3067\u3001Web\u554f\u5168\u90e8\u89e3\u304d\u305f\u304b\u3063\u305f\u306a\u3041&#8230;<br>\u4ed6\u306e\u4eba\u306ewriteup\u8aad\u3093\u3067\u52c9\u5f37\u3059\u308b\u3053\u3068\u306b\u3057\u307e\u3059\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u53c2\u52a0\u3057\u3066\u304d\u307e\u3057\u305f\u3002<br \/>\nWelcome\u542b\u3081\u30667\u554f\u89e3\u304d\u307e\u3057\u305f\u3002\u3082\u3046\u3061\u3087\u3063\u3068\u3044\u3051\u305f\u306a\u30fc\u3068\u601d\u3044\u307e\u3059\u3002\u3082\u3046\u5c11\u3057\u9811\u5f35\u308d\u3046\u3002\u3002\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[2],"tags":[],"class_list":["post-109","post","type-post","status-publish","format-standard","hentry","category-ctf"],"aioseo_notices":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/109","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=109"}],"version-history":[{"count":3,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/109\/revisions"}],"predecessor-version":[{"id":129,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/109\/revisions\/129"}],"wp:attachment":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=109"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=109"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=109"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}