{"id":179,"date":"2020-05-06T09:59:41","date_gmt":"2020-05-06T07:59:41","guid":{"rendered":"https:\/\/blog.caturday-lovers.fr.nf\/?p=179"},"modified":"2020-05-06T17:25:07","modified_gmt":"2020-05-06T15:25:07","slug":"les-chatons-ont-la-reponse-fcsc-2020-nes-forever","status":"publish","type":"post","link":"https:\/\/blog.caturday-lovers.fr.nf\/?p=179","title":{"rendered":"Les chatons ont la r\u00e9ponse \u2013 FCSC 2020 \/\/ NES\u00a0FOREVER"},"content":{"rendered":"\n
\"\"
On a de la chance, nous avons failli avoir Batman FOREVER, le pire batman de l’histoire du cin\u00e9ma !<\/figcaption><\/figure><\/div>\n\n\n\n\n\n\n\n

Intro<\/h2>\n\n\n\n

On nous parle d’un temps, que les moins de vingt ans, ne peuvent pas conna\u00eetre, sur le web en ce temps-l\u00e0, nous cherchions sur Eureka et discutions sur Caramail \/\/musique<\/a>

Bon maintenant que je passe pour un vieux, alors que je n’ai que 5 ans en \u00e2ge chat, nous allons pouvoir commencer.

La base d’internet c’est le HTML, nous allons donc plonger dans le code source de la page \u00e0 la recherche de la balise perdue.<\/p>\n\n\n\n

Fa\u00e7on #1 : la version automatis\u00e9e | exploit.py<\/h2>\n\n\n\n
#coding:utf-8\nimport requests\nimport re\n\n#variables applicatives\nregex = \"FCSC{.*?}\"\nurl = \"http:\/\/challenges2.france-cybersecurity-challenge.fr:5000\/\"\ns = requests.Session()\n\n#fontion ConnClose, logique de fermeture de la connection\ndef ConnClose():\n    print(\"[*] Closing connection\")\n    s.close()\n    input()\n    \n#Fonction Exploit, payload\/code \u00e0 \u00e9x\u00e9cuter, \u00e0 modifier selon le probl\u00e8me du CTF\ndef Exploit():\n    print(\"[*] Connection to %s\" % url)\n    r = s.get(url)\n    print(\"[*] Doing Black magic\")\n    r = r.content  \n    print(\"[*] Working hard\")\n    result = re.findall(regex, str(r))\n    flag = result\n    print(\"[*] What does the cat says ?\")\n    if not str(result):\n        print(\"[*] Bad Luck my friend\")\n    else:\n        for f in flag:\n            print(\"[*] Lucky you, flag is : %s \" % f)\n\n#Fonction ConnOpen, logique d'ouverture du stream HTTP vers le serveur\ndef ConnOpen():\n    try:\n        Exploit()\n    except:\n        print(\"[*] Exploit failed\")\n    finally:\n        ConnClose()\n            \n#Program Main\nConnOpen()<\/code><\/pre>\n\n\n\n
Franchement, quand je code un outil, j’aime bien pouvoir l’utiliser sur plusieurs d\u00e9fis, \u00e7a tombe bien, c’est exactement sa fonction : rechercher dans la source de la page un pattern particulier<\/a> et de le ressortir :<\/p>\n\n\n\n
\"\"
c’est un peu rapide non mes chatons ?<\/figcaption><\/figure>\n\n\n\n
M\u00e9thode #2 : La version manuelle | Dora l’exploratrice<\/h2>\n\n\n\n
\"\"
j’adore le design, s\u00e9rieusement, \u00e7a me rappelle la p\u00e9riode 8bits, il ne manque plus que la musique au format XM<\/figcaption><\/figure><\/div>\n\n\n\n
Une fois de plus, nous affichons la source de la page, et \u00e0 mon grand regret, le flag appara\u00eet d\u00e8s le d\u00e9but.
Le mettre en pied de page aurait ajout\u00e9 un peu de suspens, mais bon, ce sont les bases. <\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
FCSC{a1cec1710b5a2423ae927a12db174337508f07b470fc0a29bfc73461f131e0c2}<\/pre>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":13,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[111,60,63,109,61,104,107,112,113,110,108],"class_list":["post-179","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-kitensgotanswer","tag-aznavour","tag-ctf","tag-ecsc","tag-exploit-py","tag-fcsc","tag-html","tag-nes-forever","tag-partenaire","tag-particulier","tag-parttern","tag-source"],"_links":{"self":[{"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/posts\/179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=179"}],"version-history":[{"count":2,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/posts\/179\/revisions"}],"predecessor-version":[{"id":243,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/posts\/179\/revisions\/243"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=\/wp\/v2\/media\/13"}],"wp:attachment":[{"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=179"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.caturday-lovers.fr.nf\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}