{"id":86,"date":"2020-05-25T00:32:31","date_gmt":"2020-05-24T15:32:31","guid":{"rendered":"https:\/\/rakuha.com\/?p=86"},"modified":"2020-05-25T00:39:30","modified_gmt":"2020-05-24T15:39:30","slug":"seccon-for-beginners-ctf-2020-writeup","status":"publish","type":"post","link":"https:\/\/rakuha.com\/?p=86","title":{"rendered":"SECCON for Beginners CTF 2020 writeup"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">SECCON for Beginners CTF\u306b\u53c2\u52a0\u3057\u307e\u3057\u305f\u3002<br>\u53bb\u5e74\u304b\u3089\u5168\u7136\u9032\u6b69\u305b\u305a\u307b\u3068\u3093\u3069\u89e3\u3051\u307e\u305b\u3093\u3067\u3057\u305f&#8230;<br>\u3068\u308a\u3042\u3048\u305a\u6212\u3081\u306e\u305f\u3081\u306bwriteup\u66f8\u3044\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-light-blue ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\"><p class=\"ez-toc-title\" style=\"cursor:inherit\">\u76ee\u6b21<\/p>\n<\/div><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/rakuha.com\/?p=86\/#Web\" >Web<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/rakuha.com\/?p=86\/#unzip\" >unzip<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/rakuha.com\/?p=86\/#Misc\" >Misc<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/rakuha.com\/?p=86\/#emoemoencode\" >emoemoencode<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Web\"><\/span>Web<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"unzip\"><\/span>unzip<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Unzip Your .zip Archive Like a Pro.<br><a rel=\"noreferrer noopener\" href=\"https:\/\/unzip.quals.beginners.seccon.jp\/\" target=\"_blank\" class=\"aioseop-link\">https:\/\/unzip.quals.beginners.seccon.jp\/<\/a><br>Hint:<br><a rel=\"noreferrer noopener\" href=\"https:\/\/score.beginners.seccon.jp\/files\/index.php-968357c7a82367eb1ad6c3a4e9a52a30eada2a7d\" target=\"_blank\" class=\"aioseop-link\">index.php (sha1: 968357c7a82367eb1ad6c3a4e9a52a30ea<\/a><br>Hint:<br>(updated at 5\/23 17:30) <a rel=\"noreferrer noopener\" href=\"https:\/\/score.beginners.seccon.jp\/files\/docker-compose.yml-591e0b33b6a4485d7f6518c7efee547fad257ea2\" target=\"_blank\">docker-compose.yml<\/a><\/p><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u30a2\u30af\u30bb\u30b9\u3059\u308b\u3068\u3053\u3093\u306a\u611f\u3058\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1570\" height=\"1087\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-24-224101.png?fit=900%2C623&amp;ssl=1\" alt=\"\" class=\"wp-image-87\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-24-224101.png?w=1570&amp;ssl=1 1570w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-24-224101.png?resize=300%2C208&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-24-224101.png?resize=1024%2C709&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-24-224101.png?resize=768%2C532&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-24-224101.png?resize=1536%2C1063&amp;ssl=1 1536w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-24-224101.png?resize=800%2C554&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u307e\u305aindex.php\u306e\u30bd\u30fc\u30b9\u304b\u3089\u602a\u3057\u3044\u7b87\u6240\u3092\u63a2\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>\/\/ prepare the session\n$user_dir = \"\/uploads\/\" . session_id();\nif (!file_exists($user_dir))\n    mkdir($user_dir);\n\nif (!isset($_SESSION&#91;\"files\"]))\n    $_SESSION&#91;\"files\"] = array();\n\n\/\/ return file if filename parameter is passed\nif (isset($_GET&#91;\"filename\"]) &amp;&amp; is_string(($_GET&#91;\"filename\"]))) {\n    if (in_array($_GET&#91;\"filename\"], $_SESSION&#91;\"files\"], TRUE)) {\n        $filepath = $user_dir . \"\/\" . $_GET&#91;\"filename\"];\n        header(\"Content-Type: text\/plain\");\n        echo file_get_contents($filepath);\n        die();\n    } else {\n        echo \"no such file\";\n        die();\n    }\n}\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u3053\u3053\u3067\u30d5\u30a1\u30a4\u30eb\u540d\u304c\u76f8\u5bfe\u30d1\u30b9\u3092\u6307\u5b9a\u3067\u304d\u308c\u3070\u3001\u5fc5\u8981\u306a\u30d1\u30b9\u304c\u53d6\u308c\u305d\u3046\u3068\u3044\u3046\u306e\u304c\u308f\u304b\u308a\u307e\u3057\u305f\u3002SESSION\u306efiles\u306bfilename\u304c\u542b\u307e\u308c\u308b\u3053\u3068\u304c\u524d\u63d0\u3063\u307d\u3044\u3067\u3059\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">docker-compose.yml<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>version: \"3\"\n\nservices:\n  nginx:\n    build: .\/docker\/nginx\n    ports:\n      - \"127.0.0.1:$APP_PORT:80\"\n    depends_on:\n      - php-fpm\n    volumes:\n      - .\/storage\/logs\/nginx:\/var\/log\/nginx\n      - .\/public:\/var\/www\/web\n    environment:\n      TZ: \"Asia\/Tokyo\"\n    restart: always\n\n  php-fpm:\n    build: .\/docker\/php-fpm\n    env_file: .env\n    working_dir: \/var\/www\/web\n    environment:\n      TZ: \"Asia\/Tokyo\"\n    volumes:\n      - .\/public:\/var\/www\/web\n      - .\/uploads:\/uploads\n      - .\/flag.txt:\/flag.txt\n    restart: always\n<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">uploads\u306e\u30d5\u30a9\u30eb\u30c0\u3068\u540c\u3058\u5834\u6240\u306bflag.txt\u304c\u3042\u308b\u306e\u304c\u308f\u304b\u308a\u307e\u3059\u3002<br>\u76f8\u5bfe\u30d1\u30b9\u3068\u304b\u3067\u3046\u307e\u304f\u53d6\u308a\u51fa\u305b\u306a\u3044\u304b\u306a\u3068\u601d\u3044\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8106\u5f31\u6027\u3092\u63a2\u3059\u3068ZipSlip\u3068\u3044\u3046\u8106\u5f31\u6027\u304c\u30d2\u30c3\u30c8\u3057\u305f\u306e\u3067\u3001\u305d\u308c\u3092\u3084\u3063\u3066\u307f\u308b\u3053\u3068\u306b\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u305f\u3081\u3057\u306b\u4ee5\u4e0b\u306eURL\u306b\u3042\u308bPoc\u306ezip\u3092\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-embed\"><div class=\"wp-block-embed__wrapper\">\nhttps:\/\/github.com\/snyk\/zip-slip-vulnerability\/tree\/master\/archives\n<\/div><\/figure>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1114\" height=\"259\" src=\"https:\/\/i1.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-001020.png?fit=900%2C209&amp;ssl=1\" alt=\"\" class=\"wp-image-89\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001020.png?w=1114&amp;ssl=1 1114w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001020.png?resize=300%2C70&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001020.png?resize=1024%2C238&amp;ssl=1 1024w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001020.png?resize=768%2C179&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001020.png?resize=800%2C186&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u30a2\u30c3\u30d7\u30ed\u30fc\u30c9\u3067\u304d\u307e\u3057\u305f\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u3044\u3051\u305d\u3046\u306a\u306e\u3067\u81ea\u5206\u3067\u4f5c\u6210\u3057\u3066\u307f\u308b\u3053\u3068\u306b\u3002<br>\u4f5c\u308a\u65b9\u3082\u3050\u3050\u3063\u305f\u3089\u3067\u3066\u304d\u307e\u3057\u305f\u3002<br>https:\/\/stackoverflow.com\/questions\/50849406\/how-to-create-a-file-to-test-zip-slip-vulnerability-from-commandline<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"763\" height=\"631\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001653.png?resize=763%2C631&#038;ssl=1\" alt=\"\" class=\"wp-image-90\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001653.png?w=763&amp;ssl=1 763w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001653.png?resize=300%2C248&amp;ssl=1 300w\" sizes=\"auto, (max-width: 763px) 100vw, 763px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u3042\u3068\u306f\u3053\u306ezip\u30d5\u30a1\u30a4\u30eb\u3092\u3042\u3052\u308b\u3068&#8230;<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"308\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001846.png?resize=900%2C308&#038;ssl=1\" alt=\"\" class=\"wp-image-91\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001846.png?w=958&amp;ssl=1 958w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001846.png?resize=300%2C103&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001846.png?resize=768%2C263&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-001846.png?resize=800%2C274&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u3042\u3068\u306f\u3053\u306e\u30ea\u30f3\u30af\u3092\u30af\u30ea\u30c3\u30af\u3059\u308b\u3060\u3051\u3067\u3059\u3002<\/p>\n\n\n\n<pre class=\"wp-block-preformatted\">ctf4b{y0u_c4nn07_7ru57_4ny_1npu75_1nclud1n6_z1p_f1l3n4m35}<\/pre>\n\n\n\n<hr class=\"wp-block-separator\"\/>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Misc\"><\/span>Misc<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"emoemoencode\"><\/span>emoemoencode<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\"><p>Do you know emo-emo-encode?<\/p><cite><a rel=\"noreferrer noopener\" href=\"https:\/\/score.beginners.seccon.jp\/files\/emoemoencode.txt-2586093c6d0bf61e0babf4d142c2418fb243b188\" target=\"_blank\">emoemoencode.txt<\/a><\/cite><\/blockquote>\n\n\n\n<p class=\"wp-block-paragraph\">\u3068\u308a\u3042\u3048\u305a\u30c6\u30ad\u30b9\u30c8\u30d5\u30a1\u30a4\u30eb\u3092\u898b\u3066\u307f\u308b\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>&#x1f363;&#x1f374;&#x1f366;&#x1f334;&#x1f362;&#x1f37b;&#x1f373;&#x1f374;&#x1f365;&#x1f367;&#x1f361;&#x1f36e;&#x1f330;&#x1f367;&#x1f372;&#x1f361;&#x1f370;&#x1f368;&#x1f379;&#x1f35f;&#x1f362;&#x1f379;&#x1f35f;&#x1f365;&#x1f36d;&#x1f330;&#x1f330;&#x1f330;&#x1f330;&#x1f330;&#x1f330;&#x1f36a;&#x1f369;&#x1f37d;<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u30d0\u30a4\u30ca\u30ea\u30a8\u30c7\u30a3\u30bf\u3067\u3082\u898b\u3066\u307f\u308b\u3002<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img data-recalc-dims=\"1\" loading=\"lazy\" decoding=\"async\" width=\"900\" height=\"491\" src=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-002612.png?resize=900%2C491&#038;ssl=1\" alt=\"\" class=\"wp-image-92\" srcset=\"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-002612.png?w=1014&amp;ssl=1 1014w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-002612.png?resize=300%2C164&amp;ssl=1 300w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-002612.png?resize=768%2C419&amp;ssl=1 768w, https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/%E3%82%B3%E3%83%A1%E3%83%B3%E3%83%88-2020-05-25-002612.png?resize=800%2C436&amp;ssl=1 800w\" sizes=\"auto, (max-width: 900px) 100vw, 900px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u306a\u3093\u304b1\uff5e4\u30d0\u30a4\u30c8\u30685\uff5e8\u30d0\u30a4\u30c8\u3092\u6bd4\u3079\u308b\u3068\u3001F0 9F 8D A3\u2192F0 9F 8D B4\u306717\u306e\u5dee\u304c\u3042\u308b\u3002<br>\u4eca\u56de\u306ectf\u306e\u30d5\u30e9\u30b0\u306fctf4b\u3067\u59cb\u307e\u308b\u3053\u3068\u304b\u3089c\u3068t\u306e\u5dee\u304c\u3061\u3087\u3046\u306917\u3060\u3063\u305f\u306e\u3067\u3001\u3053\u306e\u6cd5\u5247\u3067ASCII\u30b3\u30fc\u30c9\u8868\u3068\u306b\u3089\u3081\u3063\u3053\u3057\u306a\u304c\u3089\u89e3\u3044\u3066\u3044\u304f\u3002<br>\u9014\u4e2d\u30014\u306e\u3068\u304d\u306bF0 9F 8C B4\u306e\u3088\u3046\u306b3\u30d0\u30a4\u30c8\u76ee\u304c8C\u3068\u306a\u308b\u5834\u5408\u304c\u3042\u3063\u305f\u306e\u3067\u305d\u306e\u5834\u5408\u306f\u6570\u5b57\u306e4\u304b\u3089\u306e\u76f8\u5bfe\u3067\u6c42\u3081\u308b\u3053\u3068\u3068\u3057\u305f\u3002<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ctf4b{stegan0graphy_by_em000000ji}<\/code><\/pre>\n","protected":false},"excerpt":{"rendered":"<p>SECCON for Beginners CTF\u306b\u53c2\u52a0\u3057\u307e\u3057\u305f\u3002\u53bb\u5e74\u304b\u3089\u5168\u7136\u9032\u6b69\u305b\u305a\u307b\u3068\u3093\u3069\u89e3\u3051\u307e\u305b\u3093\u3067\u3057\u305f&#8230;\u3068\u308a\u3042\u3048\u305a\u6212\u3081\u306e\u305f\u3081\u306bwriteup\u66f8\u3044\u3066\u304a\u304d\u307e\u3059\u3002 Web unzip Unzip Your .&hellip; <span class=\"clear\"><\/span><a href=\"https:\/\/rakuha.com\/?p=86\" class=\"more-link read-more\" rel=\"bookmark\"><span class=\"screen-reader-text\">SECCON for Beginners CTF 2020 writeup<\/span><i class=\"fa fa-arrow-right\"><\/i> \u306e\u7d9a\u304d\u3092\u8aad\u3080<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[2],"tags":[13,14,15],"class_list":["post-86","post","type-post","status-publish","format-standard","hentry","category-ctf","tag-ctf","tag-ctf4b","tag-seccon"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"\u3089\u304f\u306f\u3002\"\/>\n\t<meta name=\"google-site-verification\" content=\"I_JXw338RMBFTetbO8o1Zw6x6zpg9_FAVU7TCeD1E-4\" \/>\n\t<meta name=\"keywords\" content=\"ctf,ctf4b,seccon\" \/>\n\t<link rel=\"canonical\" href=\"https:\/\/rakuha.com\/?p=86\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"ja_JP\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Rakuha&#039;s Blog\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"SECCON for Beginners CTF 2020 writeup | Rakuha&#039;s Blog\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/rakuha.com\/?p=86\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-002612.png\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-002612.png\" \/>\n\t\t<meta property=\"og:image:width\" content=\"1014\" \/>\n\t\t<meta property=\"og:image:height\" content=\"553\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-05-24T15:32:31+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-05-24T15:39:30+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:site\" content=\"@rakuha3\" \/>\n\t\t<meta name=\"twitter:title\" content=\"SECCON for Beginners CTF 2020 writeup | Rakuha&#039;s Blog\" \/>\n\t\t<meta name=\"twitter:image\" content=\"https:\/\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-002612.png\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#article\",\"name\":\"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog\",\"headline\":\"SECCON for Beginners CTF 2020 writeup\",\"author\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/?author=1#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/#person\"},\"image\":{\"@type\":\"ImageObject\",\"url\":\"https:\\\/\\\/i0.wp.com\\\/rakuha.com\\\/wp-content\\\/uploads\\\/2020\\\/05\\\/\\u30b3\\u30e1\\u30f3\\u30c8-2020-05-24-224101.png?fit=900%2C623&amp;ssl=1\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86\\\/#articleImage\"},\"datePublished\":\"2020-05-25T00:32:31+09:00\",\"dateModified\":\"2020-05-25T00:39:30+09:00\",\"inLanguage\":\"ja\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#webpage\"},\"articleSection\":\"CTF, CTF, ctf4b, seccon\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com#listItem\",\"position\":1,\"name\":\"\\u30db\\u30fc\\u30e0\",\"item\":\"https:\\\/\\\/rakuha.com\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?cat=2#listItem\",\"name\":\"CTF\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?cat=2#listItem\",\"position\":2,\"name\":\"CTF\",\"item\":\"https:\\\/\\\/rakuha.com\\\/?cat=2\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#listItem\",\"name\":\"SECCON for Beginners CTF 2020 writeup\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com#listItem\",\"name\":\"\\u30db\\u30fc\\u30e0\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#listItem\",\"position\":3,\"name\":\"SECCON for Beginners CTF 2020 writeup\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?cat=2#listItem\",\"name\":\"CTF\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/#person\",\"name\":\"\\u3089\\u304f\\u306f\\u3002\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#personImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca4d56d3c7da793753d47fb09627affdbd776d9d5809b90d52db58b0d60cbafd?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"\\u3089\\u304f\\u306f\\u3002\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?author=1#author\",\"url\":\"https:\\\/\\\/rakuha.com\\\/?author=1\",\"name\":\"\\u3089\\u304f\\u306f\\u3002\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/ca4d56d3c7da793753d47fb09627affdbd776d9d5809b90d52db58b0d60cbafd?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"\\u3089\\u304f\\u306f\\u3002\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#webpage\",\"url\":\"https:\\\/\\\/rakuha.com\\\/?p=86\",\"name\":\"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog\",\"inLanguage\":\"ja\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/?p=86#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/?author=1#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/?author=1#author\"},\"datePublished\":\"2020-05-25T00:32:31+09:00\",\"dateModified\":\"2020-05-25T00:39:30+09:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/rakuha.com\\\/#website\",\"url\":\"https:\\\/\\\/rakuha.com\\\/\",\"name\":\"Rakuha's Blog\",\"description\":\"\\u60c5\\u5831\\u30bb\\u30ad\\u30e5\\u30ea\\u30c6\\u30a3\\u95a2\\u9023\\u306e\\u4e8b\\u3068\\u304b\",\"inLanguage\":\"ja\",\"publisher\":{\"@id\":\"https:\\\/\\\/rakuha.com\\\/#person\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog","description":"","canonical_url":"https:\/\/rakuha.com\/?p=86","robots":"max-image-preview:large","keywords":"ctf,ctf4b,seccon","webmasterTools":{"google-site-verification":"I_JXw338RMBFTetbO8o1Zw6x6zpg9_FAVU7TCeD1E-4","miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/rakuha.com\/?p=86#article","name":"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog","headline":"SECCON for Beginners CTF 2020 writeup","author":{"@id":"https:\/\/rakuha.com\/?author=1#author"},"publisher":{"@id":"https:\/\/rakuha.com\/#person"},"image":{"@type":"ImageObject","url":"https:\/\/i0.wp.com\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-24-224101.png?fit=900%2C623&amp;ssl=1","@id":"https:\/\/rakuha.com\/?p=86\/#articleImage"},"datePublished":"2020-05-25T00:32:31+09:00","dateModified":"2020-05-25T00:39:30+09:00","inLanguage":"ja","mainEntityOfPage":{"@id":"https:\/\/rakuha.com\/?p=86#webpage"},"isPartOf":{"@id":"https:\/\/rakuha.com\/?p=86#webpage"},"articleSection":"CTF, CTF, ctf4b, seccon"},{"@type":"BreadcrumbList","@id":"https:\/\/rakuha.com\/?p=86#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/rakuha.com#listItem","position":1,"name":"\u30db\u30fc\u30e0","item":"https:\/\/rakuha.com","nextItem":{"@type":"ListItem","@id":"https:\/\/rakuha.com\/?cat=2#listItem","name":"CTF"}},{"@type":"ListItem","@id":"https:\/\/rakuha.com\/?cat=2#listItem","position":2,"name":"CTF","item":"https:\/\/rakuha.com\/?cat=2","nextItem":{"@type":"ListItem","@id":"https:\/\/rakuha.com\/?p=86#listItem","name":"SECCON for Beginners CTF 2020 writeup"},"previousItem":{"@type":"ListItem","@id":"https:\/\/rakuha.com#listItem","name":"\u30db\u30fc\u30e0"}},{"@type":"ListItem","@id":"https:\/\/rakuha.com\/?p=86#listItem","position":3,"name":"SECCON for Beginners CTF 2020 writeup","previousItem":{"@type":"ListItem","@id":"https:\/\/rakuha.com\/?cat=2#listItem","name":"CTF"}}]},{"@type":"Person","@id":"https:\/\/rakuha.com\/#person","name":"\u3089\u304f\u306f\u3002","image":{"@type":"ImageObject","@id":"https:\/\/rakuha.com\/?p=86#personImage","url":"https:\/\/secure.gravatar.com\/avatar\/ca4d56d3c7da793753d47fb09627affdbd776d9d5809b90d52db58b0d60cbafd?s=96&d=mm&r=g","width":96,"height":96,"caption":"\u3089\u304f\u306f\u3002"}},{"@type":"Person","@id":"https:\/\/rakuha.com\/?author=1#author","url":"https:\/\/rakuha.com\/?author=1","name":"\u3089\u304f\u306f\u3002","image":{"@type":"ImageObject","@id":"https:\/\/rakuha.com\/?p=86#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/ca4d56d3c7da793753d47fb09627affdbd776d9d5809b90d52db58b0d60cbafd?s=96&d=mm&r=g","width":96,"height":96,"caption":"\u3089\u304f\u306f\u3002"}},{"@type":"WebPage","@id":"https:\/\/rakuha.com\/?p=86#webpage","url":"https:\/\/rakuha.com\/?p=86","name":"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog","inLanguage":"ja","isPartOf":{"@id":"https:\/\/rakuha.com\/#website"},"breadcrumb":{"@id":"https:\/\/rakuha.com\/?p=86#breadcrumblist"},"author":{"@id":"https:\/\/rakuha.com\/?author=1#author"},"creator":{"@id":"https:\/\/rakuha.com\/?author=1#author"},"datePublished":"2020-05-25T00:32:31+09:00","dateModified":"2020-05-25T00:39:30+09:00"},{"@type":"WebSite","@id":"https:\/\/rakuha.com\/#website","url":"https:\/\/rakuha.com\/","name":"Rakuha's Blog","description":"\u60c5\u5831\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u95a2\u9023\u306e\u4e8b\u3068\u304b","inLanguage":"ja","publisher":{"@id":"https:\/\/rakuha.com\/#person"}}]},"og:locale":"ja_JP","og:site_name":"Rakuha's Blog","og:type":"article","og:title":"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog","og:url":"https:\/\/rakuha.com\/?p=86","og:image":"https:\/\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-002612.png","og:image:secure_url":"https:\/\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-002612.png","og:image:width":1014,"og:image:height":553,"article:published_time":"2020-05-24T15:32:31+00:00","article:modified_time":"2020-05-24T15:39:30+00:00","twitter:card":"summary","twitter:site":"@rakuha3","twitter:title":"SECCON for Beginners CTF 2020 writeup | Rakuha's Blog","twitter:image":"https:\/\/rakuha.com\/wp-content\/uploads\/2020\/05\/\u30b3\u30e1\u30f3\u30c8-2020-05-25-002612.png"},"aioseo_meta_data":{"post_id":"86","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":"","og_description":"","og_object_type":"article","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":"","og_article_tags":"","twitter_use_og":false,"twitter_card":"summary","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2020-12-25 14:01:36","updated":"2022-09-13 16:02:17","seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/rakuha.com\" title=\"\u30db\u30fc\u30e0\">\u30db\u30fc\u30e0<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/rakuha.com\/?cat=2\" title=\"CTF\">CTF<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tSECCON for Beginners CTF 2020 writeup\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"\u30db\u30fc\u30e0","link":"https:\/\/rakuha.com"},{"label":"CTF","link":"https:\/\/rakuha.com\/?cat=2"},{"label":"SECCON for Beginners CTF 2020 writeup","link":"https:\/\/rakuha.com\/?p=86"}],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/86","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86"}],"version-history":[{"count":5,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/86\/revisions"}],"predecessor-version":[{"id":98,"href":"https:\/\/rakuha.com\/index.php?rest_route=\/wp\/v2\/posts\/86\/revisions\/98"}],"wp:attachment":[{"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakuha.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}