Danil Beltyukov kabachook

Keybase proof

I hereby claim:

I am kabachook on github.
I am daniilb (https://keybase.io/daniilb) on keybase.
I have a public key ASDcAOEbBdK7ssWTvCEbVsfFX-BHZXjGecMH1Sb-_gA0lwo

To claim this, I am signing this object:

Installation

Add notify.sh to some place
Change token and chat_id values (you can get chat_id, e.g. by writing to bot and requesting getUpdates)
chmod +x /path/to/notify.sh
echo "session optional pam_exec.so seteuid /path/to/notify.sh" >> /etc/pam.d/sshd

You can change optional to required if you sure that everything works

Node.js v11.3.0

Axios v0.18.0

node dns-doh.js | tee log-doh.log
node dns-cmd-dig.js | tee log-cmd-dig.log
node dns-cmd-host.js | tee log-cmd-host.log
node dns-cmd-nslookup.js | tee log-cmd-nslookup.log

1. Turtle sauce (200)

Есть урл http://tasks.realctf.pro:13743/learn/lesson/functions

Пробуем поменять functions на что-то другое, например kek. Получаем текст:

/usr/src/web/views/lesson.ejs:6
    4| <body>
    5| <%- include("partials/navbar.ejs", {tab: "learn"}); %>

	#!/usr/bin/env bash

	# put in PATH directory
	# usage:
	#
	# $ cd path/to/root
	# $ serve-static $PORT
	#
	# port defaults to 8000

	#cloud-config

	package_update: true
	package_upgrade: true
	package_reboot_if_required: true

	packages:
	- apt-transport-https
	- ca-certificates
	- curl

	from hashlib import sha1
	from binascii import unhexlify, hexlify
	import requests
	import ecdsa
	from ecdsa.numbertheory import inverse_mod
	from Crypto.Util.number import bytes_to_long, long_to_bytes
	from pwn import *

	curve = ecdsa.NIST192p
	order = curve.order # n

	name: Test

	on: [push]

	jobs:
	build:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v2
	- uses: actions/setup-java@v1