KAIST-IS521 / 2018s-gitctf-team1

1 stars 0 forks source link

exploit-bug4 #15

Closed k1rh4 closed 6 years ago

k1rh4 commented 6 years ago

-----BEGIN PGP MESSAGE-----

hQEMAy8nZUIPGP0nAQgAlRkliagQXbIPy1fawV49c78WXDuxBxShUr8FRyeAp5j3 4+HP6ep3iXbSoCWq6I4yndHJNO8UTZ5htDx1CNiNgQreHoPNouyo4XEF9aY3WJg2 JmB5GC70Bzk7qU0SeaoggcfI2niaeks3L0d1kKPNJQIakQIs/a3bdEx+ln8s8UTa phgQM2dDIuthHLVBfH5qngY8OijGs9v2xoklk0hwrpAnkVwZ9bYtt7dE/lmXIZP3 XEznbZyh4HXt4PMDZHJknh79HXcIxyZ6RB0klgWu0vxcEVcrZxLSXMzqERxTegmc H6cEC9P1GQBDUsVX1AebD4dfmJFTtlofj0fz0lyxSIUBjAPcMgCV6N35oQEMAJXs 2Ngf2V36QZUjHMkpRfR1Ow9QyhmSMmm8F+Ro1Rn87eozxWv9IdpmEfpkQizrLKTg wv/9raFyC/ItMh6/PEYonBz4WfuVUPlwaXe4Zy69yPZq5UQZRkkDyk9dro4vz3rT d/A+9BDBNF07aSWKDpym4bKy0iHE3Qb9jXbMVcz5nALAE1rJ5opuaVRkm2eKQTqh BePn7E9ACSk+FeVuXQwZ4fANTKsj7EL6V9+ZXzyQ79qG/5RTbfn3DVMsYgsoDlu7 gNCpFXPnsJyQNlITtCnCx32OK3Ucc93Y3qW5Mracj3T3NvZqHIqjqPYAlNrHUH5y /Pj3Y0HHQeyXkC1mcZD5rOTtG3SASlN+mSHvimpQu4xJ3l63KGPQp4yoARRlvDPu N/cQyXfxJ9VouucI7ycLkXm3wCEFVKU7FrJYG/BNktF8BjYO8FS7+uMSqcWy0YCc FII7HujXHsydQOMAsKwF0twBq87A9ft2ulw1Y+XmfEeptftXW4OOZvu9tNur49Lb oAFt1rOJyJxk78eFWzkLR1YrKhOscbfZdHQr848Go18a3gPDap4OjfYID25QjMlW BVmRHE6xPaLOLTviPLFV4hnPE65uSoi4puHDXe+qKtlIlM3OQNkDKZq1cl2POQbY WRw7UR/n4uIa24/rGNmuQ5gLDnXu1p1LxfMDen+xKpt2LaNFHYSgHCmdKW7A61d+ cdelIcpcMN0bzOnlPPsij4gjiBzT8/pV+uRPn0ugDOsY3sLp8qevVAWSQmSH+VbH 491QY2kt/HjacCa3vMEmDz5p8S7JHMe6ocQlbSNaDOK1pRUO6/ATv5/V3ildPQwe vSKwxz21yEWSZmSoSVjA4UCoAu2PYDtAatj757GlLqltiXjoIyiuCz3t1JXG8lel 71dhYPwbuENc14afQ7f/V7eRf1kvfz+cGg/VjbJfSJrmJqH553NlAexnj1+xaCBL VEyxtMMjSgRzpTE1SnjjPTfL0VucuXOtuXg6+2swYtkm3fKjUn4RT3yo6FqJEw6f t9W6jryjNeWcZTPgKgcfY8NuaQNsxTuiTJfa9jKGiR9zaJCDtrDgg9Ta2RQ3ld9R G6MkIr2G1OegkpCuKCj9hocelcykNQ8cldOdH9r6k2jD/Hcm4aWM1c6sFZSlq/GM 6BK/rz6S2VOYIogAen8v57BB+Jt3jviyq4WJafVUB+HqR2/bSLgbS7sUt36lG/uL H33GuCydUZG/nC9SppYHARA11sr2op6lV8V8kt4hUtXUAMy5Llh9AlDO1yLfcLw1 s6QoUvPm20xdMnlbhSfOK2x1H1WKdARyC9oiBFFMqwdqpHu0H2AhH1VzzYLERnbs a0jrkugN368ggiuAIQlwHGZt/Ph2TxD+PPiiXx8yXmbbTNngsnwsN4r/Ef21zZzq nZk6JW+TNgGwQRM2Zo5+ZkAU5kDI8a/AYtZlMUB2bnSIVAGNlotLkz1nMYQ0SG9j JTyw5sc4Jgqn5d0EA18svWnjmYfThlcNPP+sU8tsOdbYG3BM630ZOxnsZYJ20Pjk zshwRdUSErF+81KR+w/5I+ecjxHxly/hZOUS4azZ/5HcaYRSBXLipsabQEsruael 4HCBJLvEqnqmyspKIiZeINk6Tr1fUL54jZkgf5Oh2GT/Az8KXmjAAaYYy0RT9fIL R5yqRco9LEzzEY1o1oc9s2/VBBNlRFTo28EvpqlAWP3y19Ky37hA9V2qbS9Z6doN UcW3y8mojXbdvLf4qezLFMMzlWsKyjHhyMjYC5At5UCQoTM419mwfXC29XDYh0C+ 087JSvxXTwKVv8u5ARy3vjLhpLFX3pbde025ikjqM5wljfMUoApXXD7sPGgnv/FV JpbU7qHCiz6Ym2bQ11L13topvqIkeX5Oo+l2nfNwBfWB5l8ohfnS+Ibxq7yANC3O H3G6lmPQQbjZUArwx8+nm+Uqq94tAiItyHY1AYNvUB5pRVRpW/nlJZ259ImxS19s JjiNADVMsHe9+rD+7pvbvxWxALWkDqjtx101DrJroI91C1Y9yEvBh7vliTGvAfiM zJg1hqHDtOC174QdhWO61ME83HW8RVd6f1kbZDB9XZVV3bDd/URT4PVJHXxeuljV R4qkqUrjytgzLj9LKJ5LXYCceLMBNhCejmJ8F84jKWjzr/LsExiJb25XFlubBuVY 9PK3ltTDxbqTysjulCZE51sYp4n+tIlZPQTqvwGQElMOF7Tt7vNyly4ncIqrPetT nyic0K8m81XNEEoteFXG9CM2sVPJvnXkGtzYAifdBrsKtR+Rs+UPiYB9kI3QkWQl hqSmjkIlZVPTl5vh/E977D/IdOxWgQAP7GnhMoEGi0yTR6bPRNgOdkSSsBwsityj 9Zyf4jGCu537Y1EWfzWOrS+HzRygJIx0BL6V6DIWePcwNOcIl4h5qrjgAP4A3FcL vHIh/8/tYUNdi5HtmUX/DRYxCThOWIYEMlYDcAikXl4XZ6SG8VmXCGWcssULHMnI fpGl+7EOvp7xelSP2W0tn/q88IMUlbpb0Iu8t57IrV1+7aQ2VOH7oYOIUS7BEwNR MVmWKnaSx4nREZxbmcsK8INFYa62lz9ZlESSJX7kTzpCrQPS+uqHGcbMJJcZM4n4 pjaS5U0nl6svxC9RKeY2X3pjncSxTG6tccInqe9272sL50G7XnX6dlQlzEqYDzWg Lb1QmOe5/y6uJ5AiZAs6719pQcMFTbOyLosCVFRioYkZUlDkwe0dGiNtwy9NJo4u Dgth1LO0dGDglsusjM/1ZW9560HZiXPvPPd4nFCr/PgXF0EJknOXnQVXkMjaINwp V0Jwk4oSBH2HebiCy1Hvt2Lcw11fYD6DO8Mfcm3faFIdCtV0bAvppD41n8Gti6a6 kItqk5KxtUMVMpIUocbwMV6VopPTQ9MIi9xy91Nx+VCs9WLej9Qb1aocrYD7HIKx ubIZvcoc6XLj3kvp/AbEtAAkvOMbOEXdbnU0Rk0nkvbNFr/+cBCJnkz6RFKluvFW gjXSGZCZf/6+U7b/y6fkf6DQOw9YkjaekH/8sh/zs7YmU1DtcTZP1Qwdw5CsJLHq bP9Ft25eyUrYuUjjj3e6KxsrlLVqmoSWHNqxC2sXts7Zveh3HU0s8dE5aGBzCuVr ocA1YKJ9PWd3AlJ/m+JMrS983iY9klvBpVbhkejN5wUcnX1Ch6y7XcCjA5HT8SKg j5s4F5XtU9x6nYhZJ5aqZ5RShFMNrTsLKppvKybtBYLkxR/ibZixvEX4ZWNdoML9 o2DEwNIWfiyJLO9NtILg20R9XnKcunle0O7IPrPQH1Ash7vmPKReiWQux2oXTPvr Z9tgHK9E5GvWsXkugF5NJZC83qQZt+Mh38ZjTp/8S3jd9BOJmuvZgizKwjPcAqEq 3hO0YbKYPJrEWyKnqLjZpRHzc9sqNiWQ0+J3DBp7OLma2DFk8mDQamPY+oNUqwUD cFsB+5+by+HSnEypKKWECbCVVw9EoxxfkbFiH3Lkd+RnV4VMDHRcFFUswMNmWeFO e33hdeNj1OHDNhQ5BXKbMiLnu5VhT7mpkKGJFja0ahGVEKGBMhU/vBDet0j+v/aC /RvyCJWRuCKXU1ykMSTAPHEMm8Y9gBqhVsXEry3W6VByb63ktqINVHU9/Vwpm7GZ wJd3+CiZ6Dk1Xs+fzHMolvSkxOqsrvqTjCTyqMSxR7qajijmzLcqnToZU5+JRf7a bk8mZnuMuT3XkGkEpdLdKmT0tb2Bw/BD1SF2ogds54y9uZxO5EkAkK0UsltobFNk N/rFubTUdyDWK6gj/GEJWNtqgC2cKtXmytdlbFuvC1bSSzMasiYx1KNdIyV30IXZ fMCiO9p/StI+0wDIzOnXLXiEpn80T32S8bQj5iqFbJEo4EauazgW90aZiagP1Vwg wpAz55/RSp8RZ3SsHZucj8nNLAbE56qWYR6DdPyjgJcGLgJ3bSDpsVknVwAe0aVl 0C9aJmyr7k/IdNqLCdajYHHDtrJM9cxLnzYQiB7HOZZMGb+2Z+whKc08C0cS2EZU jtovpSf1i/rd9VqNG4uLN+OUtdtoat2e8yozxoE8Xff8mzNqgjwEm8EsQdae7UIr oCoxi0MHj0wP+0Rx+U5Wh0x51kQZ/COe3UuZ4wVdP5akpSHmjNSK+rR2aPuOpwj3 GuLk5T4yVc4WsB8ebi0k1MEq0wJ06TgzULvqJ7l4U3o9k0GLARzNbVgWTgavad32 dJNb/NqLhN6IoNEHkmlzLQtkft5eZ0aJazWguE7gqGgVxwRpF0IoL/S+nMkDNQO2 h2EQ1ea0rEzqFso0Es5/GlsFVh5rw2/wxCACOxXM3ZPde/xczPxgpVca5mD2GuN1 zrJlvf2BUoEZUEC15hLiTmzqY3ry3YwTv/MitUI6dEwgGlH4y6TwIYaRumBkclRx wM6gsL0CnfHqEn3vRDq/WoJ/dU8eN7d9x77AjXNVoAIjFTx09p0uS2wRgw1qkw7o cXSjTRqcHvr090Dbfxo4PFD+tJ+1K0Mz6RJPak3bBq/nFRQY6xFWLMVnupQud72K oaIWvu8KCmmN+Arh6dj6n0+BoKcTwRUdrqdA/l+ahwI9jHIGaBfC/lQLd8mEaTSW ebvag9/jvRrqvrRmY4DgL1XMSXpUxNeQ/zQpSz1VhJ9lr0sPblxO6LUbgVuCXeJG Fs65VTpElEo9fqNNJdScso6/+3WNoKoh/wHQssXLmWLdwr7hpZVvxqU1LkD5z5ib VZJAh7RofQWOE3qy/LhPbGnVN4zjtR9bcblDFtu2LXsqtsRVoL1jXhgET9r8TMDL 55yUkkiN+pkVrzFF9dYeRnQYAJSE1cGEhzSisagEuBpZN2i/3xklJr8U/c2944QF /2sVRgpw8FQA3TTjo0zJ6S3tczCMZ89XAuavkUu52aJnCqUT8KL2bT/mQT6tkyB2 UxHU8YtrjP8V3oCWgfflgGzUErwKKCiQds26sm2wv6RvrIizHhblgtdngwC2y1ZZ O651i9QM3VDA+Rep9JiyYKTrXkC1poKPDS/3FupTo4oq6uGne+W2RGV/+CETmjAy iiaKQmTXRoRPWxCu1IRWStikfcxfvMWzSfoDFCcxnV2GMDii4h1VnlDLBx8rnxTs CXxN773ppOt855pZxsFaurzg4glcGF0fkHtVrncphuNNC7Y2Jo54OeeaeCc/IItu xJ7IFIMRemfPLB7KNneRAjxn0B9BEO5jePjh3ae4cBJLmxMBidcL3GPGh5mJ/lnm Vy/oPvLxPyXGZ4Mb2Jxvus7hSwDY+xuGvZ9Fq7OxyGXLOh1F32OrOHgJtBmFvpkP hT5HEg+2hAZg/RW8eZuCFOz4uHZKGukZvVoF7qy9oTVlEFfxUtG4Xtcw6EF7AKt6 wwCoXlr2Pu9eMbMU6L/MjEhFmygMWaITAX8tG8/eIAsAEgixYi1sRLHwcB8r67B7 qvi6/vZv6f09mXS8yrdn1O/3dS9tq9u/s8Q+qQhwZGKcBpavWTiOXTFGA/4OydDC rrUMrNmz/lkqq0p/350jELJzuIbEMDvyuNynKUn1OmTWR1UoxK5UenfzeCF9p6eI SSbl76Eqsi3vArA2+/ggn2GXfoFqLqiISPGfghPaetxcZRXckptcErGbtTs0eiuM 9jbadbrtzDnVFhOEz6dFz+sbp/eNXxArR5m6QfrkGwCweCGetS2zxJxluuOQiUVs xLvYmK8hR2+hwmukBlEAyYjMMg2DPvhy3+X5QYORmK3UJY3t9H9VqgWFE7XaEA8i ov6Rs///Xp9Qyem8g1sx50vkGAw9FgIh4eWgFmrYLVBgahuneebd56d4b8MG1VFn OmrhsUynynbOQr5B+vvXO8Q7/xSE3FfNID4kN5XW/dsz0GUgKyhdiPZD67xlS1CC dJfRhCjWf3bBvuHS8jtVg+XwdirXpOB+Dt/yNyK0Oeq6PcC+JTVrgKjT3ORU9MXh tp1ig1wkbzCWubnh/2gEgEgz85WN3H6MkgBhT2CKtuwUApOt/6VWb9DtkoLoPylZ B0ZzneCLhOLNCE9PsYEyEUwScikBmY1//9cgRweQ0nS/ss0yVHpXvwgVobmPdg8s 9xJqVxPSnaLVFUpeNM1qNIKe3znUX0fSeeQj6E5doERCWsdUUenNERms2fvow6wT 1GnGuZUqjTFKGbasqh49pC9shxO2P5Ms3umsLaLhvTCxt+oUp6rJv30+d/ZIYTIH Q5QF2dSYX6Xc61ZIlQX3/CxYLKimYS1Q9tXf7YEZRWoCUdS74BraHrMV9jITKWxR nN7yJJvJSVZZv9lhEZVwIwT7Ki68J78ESElYEUI0MPdhEtH1frmhZ4m+eVjkdhsv XVsOq23IEJQ1hvOgkWbOE9xGl+eYCZCnDusCCeFBXPg11s5tLIoGP4ASpNMZlsCL q38S5e5b2p9+LXgdi63Ijl/Snemcakpb145P67N2IllgFK0U0wVoXaNVscL1UjRB KONTietSI+9yAr8EWgYwPjgBCh+Z80QAkLq2OZvEAIj/eTVwI125Ez22Et5/MmYT ugFddqq6x4XM8fzwvM17j7S8s9j6jkETAGFurfKm1MgEiLHO8OLNUbREwTiZxLv0 R6eX19XLW+5FdXLWmzfzKaaBnToaFXpvf1Lu8TLHdOYelxDlO4i6vyG3gBY2P4f8 MABHR98dEkyVWC5ZFRW1xDudzF0ODQQ3LepMiNZ4IGt5N7Mu0XdPsk1uqxkpA4sd Neeu16wr5tkxVaPqI+jX/F0opJfAVGnEe5W+EkFwvQCiZzbuB0RJQPeAJMitarP4 C90PPE3u8Ay7pqPvpxLWEIo5KCtzllxd+YIfBumXG3zxCCVX5Kqj0ZNS55722ygf HioIlfjgdq7zhX6L8C7aqFZ6KEC7zH/fa1tcKdtHb8BtAqj2jRSXhQYjDAwSTGxC U4Ht/5HhufWTSNzxNrPaU3blgLwT24UfwMO8n56JjHUS3UwFDxihOoj3Da9GuDKT A82x49/rshI5hmN+ooWGprcy0VWv7Pn7VHK/46wWvT6hE1OVgcWTVXCmbBe4+iGI fO0c7gczp721hMnN1oiCMkpSU4SWUfMRKsnk7ONCfboQZxl2iAwvaAUfKxzgsRoM m/1zDPEBNwxqv078D9q1Bs2bsk98Fl850hFvaoYBaupP/GVfUK3ztU3m2QabFCu3 x3UleNB/dcpcyFHk1aQ+tJ/giAHt64klsuEYpxB2mJBWdWjoIiyTqyzrpcdNeanF i06+54usp26wd8sXJOl4qXTuY/mrXptwnfDx3SaojNaoMBMkXL/BoykRVEaeEJ+p EqRkNOf2U7xd/7i4HzHl+ImKSxMbUUtdaaLoKCOij1F28wo23csUUHaN8Hkdj2Px 7B2gJlAnU53gw6H6uKdn1CVR0/zpHgGJjRHOe4E8j2kGzaBto5MIp62Y8HD6LeoR 48fSLe571jWVXF+Zj2Wih88Jf9icZ585orqVLRtiLP0oIeqYoDAeE8dTxHXYqqRB 1+KOjlS/E+QLutTU488bdoyYw0tW10kEI8lDtsjc9gOCSz9+TfEQIOnkqWdG+xxC MUziX+alncQzAV/gnLAKOsdUs9QGBP1tCKZ+dmMSCAf6FOwQnffKTSl1Ha9XdNnw /3kyA7lvovX63qG8j8ZqwDs/66ryQh41W6YqKOLqSAbtvFd/iZRWwBrceVRwzC+5 a/grUkAB+hsfGWjxBxGsOG5AG/IK1uQ9ShTO78rEnDTuB/XnbcCKOoD6ZlbD6K4b /ImW2tnUJ/NG+hvKzllC0ohvOgZ6GXMdX6azkkW1whNpUbUVzSSxUhFw3xa6yZHC MYIP+ue5da3wt+D1I8kGTha4yOy8TmxOvhRu2yhs6d6xVpDpRjBxMQLyn0O/SDVI leBhI/8AXm3Hqv4OyfmNUcWlleKSNm+9x00iuATF3zsp50MYCVqmfiuaBkMsRVhM TItpt1VaZyvsbn4ns3LKFhcRYcIovx9xVyRR9Y2g8xBg+CzmNTZucx+TzgNX9sSr 45Ln3I06nXdOtkmaj4so/NcQBj+077oPaso+op+BjVtAm5EqydTu0jHNj0gcFFdt LxX8PnslhcKW8H/qKrnOwyOQFWppJY3OEvyBt8MbR2YvPHVGEAz3dmYTCMlvBSxX N/XaluAixc7+lt9yWeEMMlc4O8XFvLNQyUZ25ASCkVFD2Mx9A1rngIFIdCYLxwj6 R2hKn13RjTeHCwMd8OCi/HwAholGaXaqFuoZix+9VnDD8Z3lSgnCYGnBfBh/jIsY Lg+C6xiGBGUrX23WRabuhTJ8LCv8ZTIwpYw7yFaZcuaTjIMH8FOr796u9XCh9yC6 AScvK2qxo5z2e1HDs++Tc9ie+U7hF5ZaLjRb4UnTbtEzwQ/r7ZnA/ytqiv3m5tc6 JdljRKeXH+pec6N8WHVru4Q2t9MbdHrQSo0ha58ZDhVnDqRVlMAqy8SGA7yEuB06 CAml0it89dVW4R1PECdXl+Vb/80ivXTdqdFQCffHcM/PQ0CKq0FYpOzbFwkmQDDB Ga8mVEyZU+GfN0ZHfCtWs9/Tk8QUOBb82bwFCBySMeMu/ShimRJQtDL+YxUsw4Oe 86+j3Nv+rXwrqnz7eGFHCLKRlGjBJ2RhNk7SBuu7lMAOKocNgx7getqN6C/d20uO v0EoSuKkN4eSHufja6N0XUnzdc3IX0ZdXqDmGgNaHeEoXEmNHU6GP2m7jkXWXrJJ zqhGmcXygfw8xZqO/Ia16R4JmAygJgAclF9k7AoIZYcskt+s+NakpqGLwL7a+37I RJFcqDkuLLs71D0/fqlZXdlPMSHqBVXw0QCxI4lVy3+1Ulhloo+9yxWqApeNKtJu j/8PHCpumbDRLIg7e7Q3b4YTdb1yMXgV253B7GwVFQjTq4IO57jIHpPJNJZSDkjc iFWQ/vryb+KDAStaFrlv34/J9vKsIwNMBV4uwh+zblIcZJ6D6CYApiuai82kUpxZ 1tRzWo6GZuOS3MFTseweMsoEY4oRCrgKjXSGSxTwag5gliVbn/GD03ZyFdTW4XqA o3U8TJAqEKYSkY7RhVzvosbCeVtcC55NLG+3JnF5h3jqN4plvrkwGyWlPhDlN6No bfQJGiuIMV8KMB1FHyZj//vUEWNurBcgHOZe1FM1p3qsKNyLMokYFUFzK/vGIAhU SMmvdEVJYjdjGofxNU04rfW7Pt0su00rFL0JDwr4kJUemPo3qjSJ2UmiC9S850Vr sfRqIfblx8C6rg1Jc6urwQpQ/yuwj7T64xUSDeB0AJDECX+i3rvHg+twz+nvc8oW HvfPJfZ1hT3Wn54DnlpJo1eS7VKLtIG4rtbodS1mcuW7gEjPCkpXYqcgUmftOd6u nrEMz7piM41YFgvsRsAbrYJcemyVZO4s49GP1bNczqiLqw0auGjoODypl6txghXV zK5BT5IfF5hNaimGOk5Gvht0gcJiHu6yrKfRi3XD2ag5asxz505OxJWN+aUQ2Es1 CIVz2dXEFxpUJie98wljBK9hHOLIT/EJELPsnM3ULuKtsBaQOnKr9pTp8z6+swGZ l/C1/VxCBwvJmwX/iaWwv/hJa+zppxq011wVfUH4ebEq0Se6Pnia/UmnLzjMSLFc 8+o9RY5IkwHabOS+NXOdJpqqaUtwTDCUwMDYYlgYyIFIy18JnKfJgkCxdYykxltN bFfbrGsLMuVX3TefXrVFWoROZPeTSznk7JfabSCgzz2e9VkqG/CkSpBqFBFrpNdf z6+1HHlugl5F5mICINC4aq2G1Zva3Ev5nmcI9Kp9+jE6THhHaNyLC7F3kz3esFsh PJ9bnQbAUoFHoKrfWM26ZjE7uuR5/5xnpLs7XIS1l7sQKHVZx30Rhm2Y6doPx5Gq FnMIijD7mFaHgtP5thHAXwVzcbX+Z5m7fv7JTWqLfYxYqieSL95qbchogpL6oYCJ sRRo6lHcZIXHkCel5YCtcH7T4Ue0sR7aEG/nXjeglO4HMyJxtwMTwQGzCAI0RbMZ HsKCF8J3jEKKwHARKtik0y2/L1ddQhEUX9qZ2CBVlGCPg2KsvSV7xXTd/nGrvohZ lhNQ2So2DqmxWkRQjCR9QLKnL5r/jwRWdijbEwzVLTObOOtLBs95q3rxWUEmXUNG vAavK1ySvTxzE6ftUEMlzwCqfSVOmnF6V9GDMcllIIRMr3K4nXqzPyRFe5uCc/uW FsigXWtRVpKWhcl85RsuNKE= =9f5Y -----END PGP MESSAGE-----

softsec-is521 commented 6 years ago
About exploit-bug4 (exploit-service branch)
[*] Starting service from 2018s-gitctf-team1 (branch '4be58078ee4aa3a3c07a2496e6d2a4ec07a925af')
Sending build context to Docker daemon  837.6kB
Step 1/18 : FROM debian:latest
---> 8626492fecd3
Step 2/18 : MAINTAINER 2018s-gitctf-team1
---> Using cache
---> 173b439cabbc
Step 3/18 : ENV DEBIAN_FRONTEND noninteractive
---> Using cache
---> 81acfea5c34f
Step 4/18 : RUN DIST=xenial &&     sed -i 's/deb.debian.org/ftp.daumkakao.com/' /etc/apt/sources.list &&     apt-get update &&     apt-get install -y python-pip python-dev build-essential mysql-server make                        gcc g++ libcurl4-openssl-dev
---> Using cache
---> f56f1fc367ba
Step 5/18 : WORKDIR /etc/mysql
---> Using cache
---> 8badbb91e0aa
Step 6/18 : RUN pip install --upgrade pip numpy bitarray pyMySQL
---> Using cache
---> 6d0e0293d9fe
Step 7/18 : RUN rm -rf /var/lib/apt/lists/* &&     apt-get clean
---> Using cache
---> 17f7684a4921
Step 8/18 : RUN mkdir -p /var/ctf
---> Using cache
---> c0f63c0a7265
Step 9/18 : COPY flag /var/ctf/
---> e99d9fd0a32f
Step 10/18 : ADD hackttp /hackttp
---> 76bef061f8cc
Step 11/18 : ADD Service /var/www/cgi
---> 97adced1da3b
Step 12/18 : ADD init.sh /init.sh
---> c471c67c5b7f
Step 13/18 : ADD init_db.sh /init_db.sh
---> 2b64badfcc1d
Step 14/18 : RUN chmod +x /init.sh
---> Running in d91218f67ac9
Removing intermediate container d91218f67ac9
---> f7b90b8e09e0
Step 15/18 : RUN chmod +x /init_db.sh
---> Running in 42d93e6236e1
Removing intermediate container 42d93e6236e1
---> 410e5bb8853e
Step 16/18 : RUN /init_db.sh
---> Running in 8c22d81e8826
Starting MariaDB database server: mysqld.
Stopping MariaDB database server: mysqld.
Removing intermediate container 8c22d81e8826
---> 06ae14fb185f
Step 17/18 : RUN make -C /hackttp
---> Running in 1286dc56c7e3
make: Entering directory '/hackttp'
Creating Release directory
Building object: Release/Request.o
Building object: Release/Response.o
src/Response.cpp: In constructor 'Response::Response(int, DataHandler::Resource)':
src/Response.cpp:71:23: warning: comparison between signed and unsigned integer expressions [-Wsign-compare]
if (body.size() != content_length) {
~~~~~~~~~~~~^~~~~~~~~~~~~~~~~
Building object: Release/DataHandler.o
Building object: Release/Exec.o
Building object: Release/Router.o
Building object: Release/Worker.o
Building object: Release/Util.o
Building object: Release/server.o
Building HackTTP: hackttp
make: Leaving directory '/hackttp'
Removing intermediate container 1286dc56c7e3
---> a6d8be46b6e7
Step 18/18 : CMD ["/init.sh"]
---> Running in ffab6d4fa248
Removing intermediate container ffab6d4fa248
---> 351a2e03f807
Successfully built 351a2e03f807
Successfully tagged 2018s-gitctf-team1-4be58078ee4aa3a3c07a2496e6d2a4ec07a925af:latest
64786e619fae63c03ca93427f6cfddf94cddb5b9830cf87218922292aacf5def

[*] Started service successfully
[*] Running exploit
[*] Failed to run exploit

==========================
[*] Exploit returned : None
[*] Solution flag : LZsfRN9lqG
[*] Exploit returned a wrong flag string

[*] The exploit did not work.