2024 强网杯青少年专项赛-选拔赛
书中自有黄金屋,书中自有flag。
动态环境
Is there really nothing at all?
本题需要选手完成风险排查:清理后门用户。当彻底清理好后,等待一分钟左右,/checklog会出现flag。
(本题下发后会有一个ssh地址、账号密码,选手可通过ssh来访问环境)
动态环境
环境复现指南 写一个bash脚本(原题脚本)
#!/bin/bash # 定义要检查的用户名 USERNAME="backdoor" PASSWD_FILE="/etc/passwd" # 无限循环,直到手动停止 while true; do # 检查是否存在 backdoor 用户 if ! grep -q "^${USERNAME}:" $PASSWD_FILE; then # 创建 backdoor 用户,设置 UID 和 GID 都为 0 useradd -u 0 -o -s /sbin/nologin ${USERNAME} # 设置密码 echo "${USERNAME}:password" | chpasswd fi # 休眠一段时间,例如 5 秒 sleep 5 doneroot运行 然后每分钟check /etc/passwd 是否存在backdoor用户 创建用户ctf,登录尝试清理
问卷链接已隐藏
This task introduces you to CyberChef and various simple and classic encryption and encoding techniques.
In this task, you step into the role of Alice, with your communication partner, Bob, eagerly awaiting your message.
动态环境
More isn't always better.
Please enter the password to start the game.
My app will run on <1>
1.We wish you success and hope you enjoy this task.
2.The flag position is in /home/ctf/flag
动态环境
Record your journey, leave your story.
动态环境
You came across a strange piece of front-end code. A seemingly simple button always fails to return what you're looking for. Every time you click the button, the server responds with: "Good job for trying, but unfortunately...".
动态环境
"Separate the wheat from the chaff"
动态环境
simple cyber messageboard,admin can leave the message
动态环境
mysql probe,you can connect to your mysql
动态环境