签到

错误输入一次后在url框中发现false,修改为true后获得flag

喜欢做签到的 CTFer 你们好呀

题目要求ctf战队招新网站,在承办单位中找到,进去后为Linux终端

image-20241202201559275

image-20241202201816473

flag1

通过help命令找出可用命令,再用ls -la命令找到隐藏的.flag文件,cat .flag获得

image-20241202212741079

image-20241202212824364

flag{0k_175_a_h1dd3n_s3c3rt_f14g___please_join_us_ustc_nebula_anD_two_maJor_requirements_aRe_shown_somewhere_else}

flag2

输出.oh-you-found-it的内容,提示考虑其他目录,进入Awards时提示要管理员权限,但是sudo su时跳转奶龙

image-20241202213626492

image-20241202213700627

尝试其他命令在输入env(显示环境变量)时发现flag在环境变量中

image-20241202213940613

flag{actually_theres_another_flag_here_trY_to_f1nD_1t_y0urself___join_us_ustc_nebula}

比大小王(未完成)

源码有些看不懂,看题解在控制台直接粘贴该代码获得flag

function f() {
// 只要还没到 100 分
if (state.score1 < 100) {
// 选择正确的答案
if (state.value1 < state.value2) {
chooseAnswer('<');
} else {
chooseAnswer('>');
}
// 1 毫秒后再次调用 f 函数
setTimeout(f, 1);
}
}

f();

function chooseAnswer(choice) {
if (!state.allowInput) {
return;
}
state.inputs.push(choice);
let correct;
if (state.value1 < state.value2 && choice === '<' || state.value1 > state.value2 && choice === '>') {
correct = true;
state.score1++;
document.getElementById('answer').style.backgroundColor = '#5e5';
} else {
correct = false;
document.getElementById('answer').style.backgroundColor = '#e55';
}
document.getElementById('answer').textContent = choice;
document.getElementById('score1').textContent = state.score1;
document.getElementById('progress1').style.width = `${state.score1}%`;
state.allowInput = false;
setTimeout(() => {
if (state.score1 === 100) {
submit(state.inputs);
} else if (correct) {
state.value1 = state.values[state.score1][0];
state.value2 = state.values[state.score1][1];
state.allowInput = true;
document.getElementById('value1').textContent = state.value1;
document.getElementById('value2').textContent = state.value2;
document.getElementById('answer').textContent = '?';
document.getElementById('answer').style.backgroundColor = '#fff';
} else {
state.allowInput = false;
state.stopUpdate = true;
document.getElementById('dialog').textContent = '你选错了,挑战失败!';
document.getElementById('dialog').style.display = 'flex';
}
}, 1); // 这里的 200 改成了 1
}
flag{I-am-tHE-hAckEr-king-0F-C0mPar!Ng-NUM6ErS-z024}

Node.js is Web Scale(未完成)

PaoluGPT(未完成)