[ Day8 ] Web 小回歸

2021 iThome 鐵人賽

DAY 8

Security

從 PicoCTF 中跨領域學資訊安全系列第 8 篇

13th鐵人賽

Yvonne

團隊飛天小女警

2021-09-23 23:21:44

2559 瀏覽

分享至

昨天我們解完 General Skills 感覺還不錯
我下週預計會往 Crypto . Reverse 前進
靠.我好緊張,我沒囤文現在快11點
我它嗎才打5行 ==
今天預計會很短,我先發文出去
晚點再修改,補充
今天我們回歸 Web 簡單小題目

GET aHEAD ( 20 points)

Find the flag being held on this server to get ahead of the competition http://mercury.picoctf.net:28916/

Hints
1.Maybe you have more than 2 choices

2.Check out tools like Burpsuite to modify your requests and look at the responses

以下是http://mercury.picoctf.net:28916/點下去的畫面

我的解題思路,第一直覺標題藏了東東,看到提示有說 Maybe you have more than 2 choices

我們用老方法右鍵查看原始碼

<html>
<head>
    <title>Red</title>
    <link rel="stylesheet" type="text/css" href="//maxcdn.bootstrapcdn.com/bootstrap/3.3.5/css/bootstrap.min.css">
	<style>body {background-color: red;}</style>
</head>
	<body>
		<div class="container">
			<div class="row">
				<div class="col-md-6">
					<div class="panel panel-primary" style="margin-top:50px">
						<div class="panel-heading">
							<h3 class="panel-title" style="color:red">Red</h3>
						</div>
						<div class="panel-body">
							<form action="index.php" method="GET">
								<input type="submit" value="Choose Red"/>
							</form>
						</div>
					</div>
				</div>
				<div class="col-md-6">
					<div class="panel panel-primary" style="margin-top:50px">
						<div class="panel-heading">
							<h3 class="panel-title" style="color:blue">Blue</h3>
						</div>
						<div class="panel-body">
							<form action="index.php" method="POST">
								<input type="submit" value="Choose Blue"/>
							</form>
						</div>
					</div>
				</div>
			</div>
		</div>
	</body>
</html>

這是個 HTML
這題就是要考考你這2個基本知識
GET 和 POST
我們已經看到 GET 和 POST 2種不同的方法
提示說有第3種方法可以彈出 HEAD