nyupcs / pcs-sp21-lab6-server

0 stars 0 forks source link

exploit-main #47

Open Gii27 opened 3 years ago

Gii27 commented 3 years ago

-----BEGIN PGP MESSAGE-----

hQIMA7KtScPIyW/lAQ//ThJgd/dofi5aGILdyxgybsV+Ukz6itfmjxPExFLRwBTR hP3/cOQlVhz0hb2m37R5WXJ39245Oln37+4KPf+0dAsYzCuQk92d+6nyTbmlS5G2 oFbLJ88L/3GW7RrnK1QKjAA8drCZ4kUj8zE6gGOTdGLXhN5mnTeC1MIOMHyFEEhu HyjHE6tLpizya+b1JaLIqBFp3XBy/eYGVbz6A17H3nDV2HNOsgEl5w5F3NQqKJpQ kCSpSrszU0rz8tg9DlhSFRD2Ef/z7NeU+KE7uapiSABiAgl7cs3oAjImyo2Kjf9C tvxOJlQPY5QF24xl6iMlIA99UKga73o3VS6jA1TcxcIipjx/hD5NlKR7509niAmO M/eGNaCkQknL+tlyCKfSPoKvgN5cl/u9QBTAvqdCr9Px2gi4/4jNhEysP3P/ppj9 oQG+IUbK3Z5XFFAv2Bh0HkgS6BfCv4JAumEW1XSkoh4lezaIejKQz3ybAVqoL2cf bLdcXHdFpPdb3jdr+f1N8QZ1CRf4gpzlLDbqu0eIhdEJ/I0Jvsm2nWAP0nHUpmES niyrmGPZopHpa35x28X+bgTSLV0owNBARGwhjB0STRFTdfAwmePTW+Zl2vZE8jgV l9UV4uQAEPPhN3dxZlB35Y1eG2RHLU0Wx4vbuW1sO501WZETTOAx8KgHEROpKnjS 6gHMIAILHO3dWLOrVENzeaZ03Ow6tZGlM1H/YGdjF/q9hMNeY6rCWFk6Hj+nNZO1 +9J45cWp0wy/yOgtqC9VqUM8us4TkRGggdJN737QcUR5nj5pJyfhOTjcC3us9cbD 7eiBmzuJm9e7qMKffRnv8N2E0qzjjS91Xp9cQkcIVlvb7vp7L4vDlMF3bOPl/Mi+ I2RiL6resLVudo0rfj9EMKCd6EXTn8I8PYKCQxtq3ixEJLQj2lejdndSh/FJIIGA +IFqT7v1O5GL+urU0iD3CiHF5t8MZeaoGjKoHqOtEakhNvLfuDUCGBlesZQsoMkM dpoY7X8r0Mamt7UbGWnpIxY1wlvcQ9xQUmuVCvlpyMORjwYjUqEvOsRA8MLXidxs HUo30t3KdEN8mM/WcwU75SvWPMfxDiMHDtodvz7GElKuHTI1oYCgO0TW7m6Jx3rh KPfHr4bPRggngfTzbnq+CrDLQ13urIIOg7OJ2sMg5GRmkc1Me/r+ElH2TJdC/hOA 5f9p6NzeJSkAqPj09m5sNl704HqlFdQk2bDHJL2MkJfH9AasJdYXhyj4AWimY9qd MGyqdNF5i/LPG8U3/wtIIsOdKIkwAOUSJNmx0+FEqR6MmQfd7+qBiP3tjsKZmrjr 8dlIgV83+K+YEVfF6/Mhoid9HXkpcIokHFQ0IfT8XF+5ZFYlPQP3ry936XuzAcZY 04otUdYAHJWsCWzeMp9WbDN7FrTvd+TIP2KZL+g6RZ/5x5bEpYEhhM7Vj42gnR60 OHPthVyua3dbgmbMZyEadRJVbXfnoPpRJ+wwEF4/qpPfZlzLGDDiw4p0uDIeZ9q0 MPSYxLARJU7sUAOxr2XY8kjYHoMenadj0iPF1PD497G6XR3c0ILi1/O6pqBoxovX pJFtpPdGsMjeO86+E3QvgkzSNuIER8b3tcpa81oYmzVUyhNYlB+axnykfmFlvQCZ ooA0GdYLWq/2qOjjY66sBTP3DaI8Iu1Mqlww9vU9uqBHtn8duqXka1/xI6/7vQc+ NkQl+AamMmL3BOUvX64lUnsCjHMmJNrn6JDnlpHH2i+52nSCt6Rsz6Gv1KO7KiGE 4pHm7TuCF6XXvPNFOv5pZL5LZLnO8h30y1kPjLd/K6/lDeomio+ST5xD+te+uAg4 v/LxynN9FWjF4STMIKmZSRLTKCEUacieeuEswVTJhJuGOM1QhDWV8OR9YO2fqkTX pkMdtS7g3c4q+EuHhCTTgdDMBqZ8sT3itbEoL+GlWlt4P3qfQHgGMpLTR8EnlGK4 Ru/R/ws5fgVryLqSp3TaWCf+peJY84wgwDBxgsiGuzRfKVxu5j7LcrwCdbvWHkz0 MkjBRbuy5SB2+/xJpUzye+PpDaBXfea73oZH8Iw4DUQpi7W7ia+tLtWvsTyZBK4o sevD2IV9hj9W1zUQbcZ6oOTP+g7Ds/F85CA8ieIS8oSmgDJAnIZ1lMDEcwKldvNb +HMQ5lrODla1M/n3UZt00MfEQIY9SH0pd079DOk+bCtE7v5S8ot+rwvxXYIX9D9W Be1BPTninYdkw0CeE3G1o+sMY44FgslOnZJDuk1/lDrgHQ+/+w/kbrwxIKD2xIal CCoucTDz4skeNdsYQqUnqL1H/3OIOGJAAW4tNlnNZwoBzNPRe/R5UC1O85sxkJ+z YL/HMl95pmETlPWJj8t1UrVn4RDjFi4hlqJih3K4PXkGs1qFTlHF6dut9QV2Bmvn 2gSmmWQGFHH/HLJgbyiGOYpDLTMc4jajPCZXV1nCuc/FmxxyJlsBQ2TdHRD6cu9i 9kN+dpm0+uaJaO610Kzxx0CIBPRCywI47rybGa3+l5Jkf0y3g151j9FKBIZi4goq 09xQIUYH8UNfgpRWtCPOVVnnABfQOJpPGt2Wp5Xb0LakQFpC4NXCh8cyOBYZVswZ P9LHNoZI7S8B5BZIzRQJbciPcbgOmbH8/02JCySSx+sWsF2RpGJujn+Y2QFumPUX y+68bFQyNKvvboa0t4wCezACT53WW4InmPDFWNZhnse4de1Q48VfxdQRJ728s5Bt DL1R6aesbvf4N1syEOPvQ1Itf4oI5TWJBN7z2FNDYktGbAM5r2rP+N7Pg3ZcH4/b mxyAoGeZNt4CKhYX9XoZzF/QdQMutVan2PdGZll7Dyc2QfC3 =uNwC -----END PGP MESSAGE-----

Gii27 commented 3 years ago

My NetID is ls4330, Licheng Shen, and my pub key id is F4DFB3D04126E896

Gii27 commented 3 years ago

-----BEGIN PGP PUBLIC KEY BLOCK-----

mQINBGAqyxsBEACkJHTx9TnZzG5F47tgRCYH6bZFG1evx9n3L1PEQ7JoQsL3OO1l RkINmY18OpPA4osdtCFbMqji7rBoiXD5aUSYEhFD4BTsCNEX/Ad5bmin54pzquzP Gu7XycXnWi2tShHB61tdI1iH3h+Mn5FHODqbhGv+NwJAMalyDdKxJHIjGHV1lnzm MDFXuC/QzivSAy+cJDwC8P4Itjw6PATc0tJi3c1DZXBEu59YoYq1X4CHHMzGIf7O jUDw/ZNPQu0UKpCJk8kw9Bp5GovA6EyR4Qo6Jj+7zlY73atn8GGK0LJb+k0gVYqm NoZjc0V5kXfhI1fk77CKby/dUGffRu/n4YVTycpxA0b0EK6KHB7GAxc50qkdnJCr UME8IV7bhmgH5dwo0YOdq3jv/TwoM0cJrzJ3hempng3E3MCmZMSPrZT3xfOM8uk7 2zl4bOIKgH8ixM2AksENx1QuJuiLXrjuX3dFxk0Slu/egd9rZXGacZOx+tsnzWkH CSOB9bjjVcIMi7uaGQG3xpdgCMwIuiiSky6rXLe2aVaMCV9+HvDb1lgQj5Fcp/mC oGKplR4ZV/DTn6ZyMnV7sGN3t0Yviazcu1uv9oNVnUnWFm2p0kyh2+Ax4CD87wTN zTfr1XcRNaSoLrNCsgK1p5PfLfYEBVyBOHJoqn8/tl77sSi+sTXFA+FzEwARAQAB tBZHaWkyNyA8bHM0MzMwQG55dS5lZHU+iQJOBBMBCgA4FiEE/3+eJLCFXTkJTIOn 9N+z0EEm6JYFAmAqyxsCGwMFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQ9N+z 0EEm6JZDWA//Q6G+x1Af5WWrxLEvhXBCy/Tx4Uh5Q9D+oTpfokugaMSS/SZeF5IF kB8tkcG7ctKPgmz5OILK9W0lN99wZs4h1ospK6v9byq3AA7VE2+wGp6mGxOrjsAw TAyKe8tYm1jmg36tQJUUscQtuImsjOJQ5+P6YGL5YT9Z2XNyJRKNZ1BpWxSaVH7q 2LIvVkBvsuyelsNLk1e+6FHKHh/RZUSutBYs6NUYaw3ULidB78nEcv/BON/MWUCb kNFCv5j2kQFRQOEJuRCV6xP0xgH5iM9lPTOcOYj4m2+OxWeMG8bvFVH8ukpYTfnP uts9jJxpptu89IVviU9F4jA8deQHNOWp1CGy56HFYe71tHlNsCkBKeOJ6rkM/LL4 lqTi9epxxxPA3VUX/KX8yErBetA2DC0CE6KqBUo7tRwxPDpyua7qJxQuz6k1cEiG mqY9v9FK4k/ltHlj6dZTVHbd3XkcZ9YdR0OFfKx9dlJyROBCf2oZJvhweCcFRheP 3Zvo6oQkO3rJtzhqvLTWFVuQpysS61UYXsoMvS4DKUqzQTIq370kJevsU4hFBbV3 hO6GX07qoKuPc/j09QxZUQtTf6z4Diu1AyWU383qUu55lUhCHHkAW56BBWPWmsZ6 Vv5i76uA7SqX1sn0hI8E33rc+YW65Njzl23bJad9J6OMfpUTRU9aEwO5Ag0EYCrL GwEQAJ6B9ZjKC+BdaNah4MKJf8iIazyzpbCMnVrIHVDhga3TgfNEkscM8i5/BVun i1zOIZhutdn2CRdnUHnEIO8w+egYA4d6AEpvi6LWQsu/PerQL6Ivqt/fmAwzRZMN juDhythoxmH3EQ0f+3zVz+/3AloA3HLFIp2QRgDIXb6C20yYdhArqxMC6ekanOmR NViN6yJ2u+IwC+ZpER8nhXBk9ffrABxXG+/hYTEqh+8mxEbJGp2mOokCQaCzwy/Z KEUj9UdiZy4lt2pvjf/O9ItKIqlpLN2BPIh7/9WcTUMxs0RcY+ylBRyIXZl9nG2l DEQqlG7EfbcVI7z8yXEuu8RqXeUDsY+oIVOXM1xvMgbfUnOaVDkVY3La/2r8GBk1 wyXZJGt8tegiaSeZW/4zYGQ5cxyk0pS0p0Hb+UPPfUj8+xCEKT6AUKpnRnfzp/o3 zBN1a1N/Ktaa8VYSnJKIhVLCOljKlRviovE8wSqZ5MNmX7TFiNGrBMNsyFfYL2Jh 2WWfbLd49JljyNEPG4IV4UHRkl3V7I+mr7Dh9FajrQ+2oX1uGRZNTQOcRFw2Bptx j34OQIhn5qPwF+ZYhO65V3NoXJjO4fjdhK/qBptqQJDdxySp0vyH2fHx2Z4b6Uvv n5QuCCwSzNs9h39GvMEaUkULbJb7cDWugxP2RAjL9JSZ5DJJABEBAAGJAjYEGAEK ACAWIQT/f54ksIVdOQlMg6f037PQQSbolgUCYCrLGwIbDAAKCRD037PQQSboljT7 D/0fUDA5bGxv1mDNpOKrMK2Ve8jigxtQtTjaA9AhmlgyyTfsZ3pp8m4cFjk4vITv arzIh/kPJhDJtQvZDDe7ItWpegIHCo8KvNKX6FaJDaHkYKmp83hZ7EsAsVWdC5An wRBZlpY1CtlT0FTinaoruUIrq90gR840uTUE3sTRLLkkrtEzXB3s3uHcNtn4U4xU 54IB7AfdVzu1PD6JGLmkyD8KuLdvf0MHIJ+6mtOio/Td+iq2ItihJiaIHhwiiGr9 YWoF963ZnVMGIFBM4GYon1qIufrCeiELFyq/2rg+Au5OstLckitkrWE5JjFCEA67 AWyh6NqgCTTC7+lqLEcHUB0ZJ6EjPWqS9jVjKIBwGrho6qDrYEV5Fq7gU3e1AQig eCgMOpTZ2OCoM+Ez8CFn+DoqjYJD/dICja8VgNLPoFbqWtGgOsGKLpRat6IzSpm9 IiOihDlgtaMtGxVRsTz5nq+TX9bgMzS/E5s/hOyGNK19DEhWudVUnLugfC8Ct26s wNSj2C6V7FYnZchne1JgRfsAlqPHoYS8c50WBlOIRnLC0jedi0hAzC3jNTTxhWt1 QTM9Yy8fZlZOlxEM9bQje3u4Z4HTe5/L6qm9oYoe6HHZNe+D0mTDCTff401sOVAv tCHelJi5ZEwdze5j7xwBQwwqFZaMndVWAx4kgVIiQXAl6w== =gj25 -----END PGP PUBLIC KEY BLOCK-----

ksmaybe commented 3 years ago
About exploit-main (exploit-service branch)
[*] Starting service from pcs-sp21-lab6-server (branch '0ff895975bf20c1233991128be75afbddf7b0049')
[*] Failed to start service
#1 [internal] load build definition from Dockerfile
#1 sha256:58cc0a77afcd5d342d27b4af3be02dd3eca941f86b24afe386880461d2f489a7
#1 transferring dockerfile: 303B done
#1 DONE 0.0s

#2 [internal] load .dockerignore
#2 sha256:00091347f468dd37bdd7278275c11122bb4ab890d56a57a1a543157d4034cc5c
#2 transferring context: 2B done
#2 DONE 0.0s

#3 [internal] load metadata for docker.io/selenium/standalone-chrome:89.0
#3 sha256:beb2bf66ef313fd2e3aace2d303a1c73abc80369b025ce6bfeb4a2cc5920b54e
#3 DONE 0.2s

#4 [1/7] FROM docker.io/selenium/standalone-chrome:89.0@sha256:beb559d9a8fddb3cc154122598a527c6fb00f19751577974013924a209431f91
#4 sha256:cfa7f2d3a3cae72a7b4a2fd6d9e3fe6bf7d6c6a4462d83f9fadb5866bd1543d1
#4 DONE 0.0s

#6 [internal] load build context
#6 sha256:dfc27930a285755d5429150659c940aecd19b3fea3d39845353b95b709b4834a
#6 transferring context: 99.32kB 0.0s done
#6 DONE 0.0s

#5 [2/7] RUN apt-get update && apt-get install -y python3 python3-pip
#5 sha256:1f82db4cdd0345e13bbf91421a58803f0de60b2a8230a42c43c8a09334118de0
#5 CACHED

#7 [3/7] COPY . /app
#7 sha256:22b2482c1979e11680400857feabd0d8fdff4bc438ed43a91249e861996cc01c
#7 DONE 0.0s

#8 [4/7] WORKDIR /app
#8 sha256:22755a5fae08d109c96cf43ae744bba18df7356d05f82950e17ee9d4dbbf5fcf
#8 DONE 0.0s

#9 [5/7] RUN mkdir -p /var/ctf
#9 sha256:9a33303ca76d855e75a28f7baf7d3a438538a505521a79e112e0a690e9f25965
#9 DONE 0.3s

#10 [6/7] COPY flag /var/ctf/
#10 sha256:297f82938b46616d505546cab36ab2cf339b9cd700f94ece602d5267a0c10c63
#10 DONE 0.0s

#11 [7/7] RUN pip3 install -r requirements.txt
#11 sha256:7c8dcffc3fa7c364b2c8cb3701480d011252e328c6d9e5c6c4f54148e93204d8
#11 1.015 WARNING: The directory '/home/seluser/.cache/pip' or its parent directory is not owned or is not writable by the current user. The cache has been disabled. Check the permissions and owner of that directory. If executing pip with sudo, you may want sudo's -H flag.
#11 1.142 Collecting click==7.1.2
#11 1.196   Downloading click-7.1.2-py2.py3-none-any.whl (82 kB)
#11 1.252 Collecting Flask==1.1.2
#11 1.263   Downloading Flask-1.1.2-py2.py3-none-any.whl (94 kB)
#11 1.314 Collecting itsdangerous==1.1.0
#11 1.323   Downloading itsdangerous-1.1.0-py2.py3-none-any.whl (16 kB)
#11 1.380 Collecting Jinja2==2.11.3
#11 1.392   Downloading Jinja2-2.11.3-py2.py3-none-any.whl (125 kB)
#11 1.467 Collecting MarkupSafe==1.1.1
#11 1.477   Downloading MarkupSafe-1.1.1-cp38-cp38-manylinux2010_x86_64.whl (32 kB)
#11 1.546 Collecting selenium==3.141.0
#11 1.556   Downloading selenium-3.141.0-py2.py3-none-any.whl (904 kB)
#11 1.660 Collecting urllib3==1.26.3
#11 1.672   Downloading urllib3-1.26.3-py2.py3-none-any.whl (137 kB)
#11 1.751 Collecting Werkzeug==1.0.1
#11 1.769   Downloading Werkzeug-1.0.1-py2.py3-none-any.whl (298 kB)
#11 1.833 Installing collected packages: click, Werkzeug, itsdangerous, MarkupSafe, Jinja2, Flask, urllib3, selenium
#11 2.311 Successfully installed Flask-1.1.2 Jinja2-2.11.3 MarkupSafe-1.1.1 Werkzeug-1.0.1 click-7.1.2 itsdangerous-1.1.0 selenium-3.141.0 urllib3-1.26.3
#11 DONE 2.4s

#12 exporting to image
#12 sha256:e8c613e07b0b7ff33893b694f7759a10d42e180f2b4dc349fb57dc6b71dcab00
#12 exporting layers 0.1s done
#12 writing image sha256:77da5641ea18171b57f5ea3c3a7e67dcd072cbd3c6bf41e6fc4b3e094e11d721 done
#12 naming to docker.io/library/pcs-sp21-lab6-server-0ff895975bf20c1233991128be75afbddf7b0049 done
#12 DONE 0.1s
docker: Error response from daemon: Conflict. The container name "/pcs-sp21-lab6-server-0ff895975bf20c1233991128be75afbddf7b0049" is already in use by container "8091eae6427042a587827ed4ffe9bb129700b81cd8917e1bf7ccecbbe79645d5". You have to remove (or rename) that container to be able to reuse that name.
See 'docker run --help'.

==========================

[*] The exploit did not work.

ksmaybe commented 3 years ago

This submission has been verified. Well done!