tool.leavesongs.com

l-team.org

ASIS-CTF-Quals-2014-Image/Trivia1-Writeup - ::TEAM L::

http://l-team.org/archives/102.html

在网上找到了SMB NES Rom Text Editor这个工具，不过并没有检测出任何有关flag的信息。 Zing : TEAM L:. 2014 : L Team:.

l-team.org

About - ::TEAM L::

http://l-team.org/about-us.html

About : TEAM L:. Member Join @2014.11. Member Join @2016.05. 2014 : L Team:.

l-team.org

DEFCON-CTF-Quals-2014-Heap/Shitsco/sftp-Writeup - ::TEAM L::

http://l-team.org/archives/117.html

A1 4] 8] = A1 8. A1 8] 4] = A1 4. OK,利用上述 DWORD SHOOT 把shellcode地址写入printf函数的导入地址即可实现任意代码执行，exp如下. 如果set name的话 没有value ，就把name和其对应的value释放掉。 终于发现，如果想释放第一次创建的name1，那么这片内存并没有释放，而只是清0，下次set name value的时候还会被利用，但是第二次创建的name2的指向name1的指针会被清0 如果再次set name1 value1，然后释放name2，那么name1- FLink指针仍然存在，但是name2已经被释放了。 发现如果输入一个指令比如 show xxxxxxxxxxxxxxx 而xxxxxxxxxxxxxxxx的长度正好是16字节，那么name2释放的内存就会被xxxxxxxxxxxxxxxx利用。 最后再次运行ftp2.py，操控ftp.py,，回显flag. To1ight : L TEAM:. 2014 : L Team:.

l-team.org

ASIS-CTF-Quals-2014-Winner/Random-Image-Writeup - ::TEAM L::

http://l-team.org/archives/69.html

搜索cheetah lane tangle winner找到了这个链接,往下翻看到了Winner.得到flag. Http:/ en.wikipedia.org/wiki/NIST hash function competition. 先载入了flag.png，初始化了一个介于1 2* 256之间的一个随机数，再生成了一个和flag.png一样大小的图片。 接着看get color(x, ,y, r)函数。 DM Luo le4f : TEAM L:. 2014 : L Team:.

l-team.org

ASIS-CTF-Quals-2014-Undistorted-History/Hidden-flag-Writeup - ::TEAM L::

http://www.l-team.org/archives/72.html

Trivia 1 Undistorted History. What is the name of this place? No need to calculate md5 or appending ASIS. Web 75 Hidden flag. 卧槽这题没有说明 逗我吗，什么都没有怎么做 但题目是hidden flag，隐藏的flag，在做其他题的过程中，我们就发现所有题目的数据包都会返回一个X-Flag头. 分成了5部分，装在一个数组中 [ASIS b6b, 244608c2, c2e869cb56, 67b64, b1]. Phiti0n le4f : TEAM L:. 2014 : L Team:.

l-team.org

DEFCON-CTF-Quals-2014-Routarded/Hackertool/3dttt-Writeup - ::TEAM L::

http://www.l-team.org/archives/105.html

Wow, they forwarded http on a router with default creds? It must be my birthday! Http:/ routarded 87f7837f50a5370771b9467d840c93c5.2014.shallweplayaga.me:5000/. 我不会向你叙述一个汉语狗由于对It must be my birthday的错误理解引起的辛酸历程. 题目已述,使用默认凭据可以登陆服务器,基础认证,BurpSuite跑了几遍,没有结果,后google默认密码,发现自己忘记尝试空账户. 登陆后发现web提供一个ping功能,看了下,这是最直观的输入点,尝试:. Bower components flag requirements.txt routarded.py static templates. Hey, we need to check that your connection works, torrent this file and md5 it. Play well and play fast. 2014 : L Team:.

l-team.org

AliCTF-Quals-2014-L-Writeup - ::TEAM L::

http://www.l-team.org/archives/119.html

AliCTF 2014 L WriteUp. 2014 : L Team:.

l-team.org

ASIS-CTF-Quals-2014-Trivia2/ToqToq-Writeup - ::TEAM L::

http://www.l-team.org/archives/64.html

Trivia 2 Points 10. Downtime caused to a website by massive referrals from another popular site. Do not calculate md5 or add ASIS. File- Export Objects- HTTP. 发现请求87.107.123.4的多个端口. 2014 : L Team:.

l-team.org

PlaidCTF-2014-twenty/mtpox/doge_stege-Writeup - ::TEAM L::

http://www.l-team.org/archives/43.html

It's so far in the past, computers haven't even been imagined, let. Alone used. But somehow The Plague has already been here, building an. Evil army of hackers. Can you find his secret message. Http:/ www.blisstonia.com/software/WebDecrypto/index.php. The flag is sincenewcryptomighthavensabackdoorsiuseoldcrypto. The Plague has traveled back in time to create a cryptocurrency before. Satoshi does in an attempt to quickly gain the resources required for. Coins went, we might be able to stop The Plague.

l-team.org

SCTF-2014-L-Writeup - ::TEAM L::

http://www.l-team.org/archives/179.html

S= 6duFg3rJ [: -1]. For i in s:. Referer http:/ wenku.baidu.com/link? Http:/ gintama.sycsec.com/admin: $INDEX ALLOCATION/index.php. Http:/ www.exploit-db.com/papers/18263/. Create database injection db;. Use injection db;. Create table users(num int not null, id varchar(30) not null, password varchar(30) not null, primary key(num) ;. Insert into users values(1, 'admin', 'ad1234');. Insert into users values(2, 'wh1ant', 'wh1234');. Insert into users values(3, 'secuholic', 'se1234');. Loginphp * * */.