From a7f201d05fde4511099c3399c8046bf74ec8fae2 Mon Sep 17 00:00:00 2001 From: Enrique Date: Tue, 5 Mar 2019 10:52:31 -0600 Subject: [PATCH] Dumb fix --- 2019/mitre/cleanroom.md | 2 -- 2019/mitre/inplaintext.md | 2 -- 2019/mitre/nyan.md | 2 -- 2019/mitre/turingtest.md | 2 -- 2019/neverlan/bashninja.md | 2 -- 2019/neverlan/purvesta.md | 4 ++-- 2019/neverlan/sqlfun1.md | 4 ++-- 2019/neverlan/sqlfun2.md | 4 ++-- 2019/neverlan/thingsarenot.md | 4 ++-- 2019/tamu/nasc.md | 2 +- 10 files changed, 9 insertions(+), 19 deletions(-) diff --git a/2019/mitre/cleanroom.md b/2019/mitre/cleanroom.md index 3f1158e..bd42425 100644 --- a/2019/mitre/cleanroom.md +++ b/2019/mitre/cleanroom.md @@ -1,7 +1,5 @@ # Clean room ---- - (50 Linux) The year is 30xx. Clyde is trapped in an interdimensional transport module. The Federation has captured the module and has prepared to dock. The captain of the Federation lander has instructed the henchmen to bring Clyde in diff --git a/2019/mitre/inplaintext.md b/2019/mitre/inplaintext.md index cbb2c13..c6da44f 100644 --- a/2019/mitre/inplaintext.md +++ b/2019/mitre/inplaintext.md @@ -1,7 +1,5 @@ # In Plain Text ---- - (50 Binary RE) Created by: David Maples Starring: Mary McCormack, Fred Weller, Nichole Hiltz, Todd Williams, diff --git a/2019/mitre/nyan.md b/2019/mitre/nyan.md index b81189f..a3cef86 100644 --- a/2019/mitre/nyan.md +++ b/2019/mitre/nyan.md @@ -1,7 +1,5 @@ # Nyan ---- - (50 Misc) Nyayanayanayanayanayanayanayan ```sh diff --git a/2019/mitre/turingtest.md b/2019/mitre/turingtest.md index 1b956b1..d9d819c 100644 --- a/2019/mitre/turingtest.md +++ b/2019/mitre/turingtest.md @@ -1,7 +1,5 @@ ## Turing Test ---- - (50 Web) Break into his account! [http://138.247.13.111](http://138.247.13.111) diff --git a/2019/neverlan/bashninja.md b/2019/neverlan/bashninja.md index e2d9570..33dc36c 100644 --- a/2019/neverlan/bashninja.md +++ b/2019/neverlan/bashninja.md @@ -1,7 +1,5 @@ # Things are not always what they seem ---- - ### Bash Ninja Games Similares a los juegos de [Bandit](https://overthewire.org/wargames/bandit), son niveles diff --git a/2019/neverlan/purvesta.md b/2019/neverlan/purvesta.md index cec68a2..547e225 100644 --- a/2019/neverlan/purvesta.md +++ b/2019/neverlan/purvesta.md @@ -1,9 +1,9 @@ # purvesta ---- - (recon, 75) I love Github. Use it all the time! Just wish they could host a webpage... +--- + ## Desarrollo: Analizando lo que nos dice el problema podemos buscar que Github tiene un diff --git a/2019/neverlan/sqlfun1.md b/2019/neverlan/sqlfun1.md index 8ab189b..41e197a 100644 --- a/2019/neverlan/sqlfun1.md +++ b/2019/neverlan/sqlfun1.md @@ -1,9 +1,9 @@ # SQL Fun 1 ---- - (Web, 50) My Customer forgot his Password. His Fname is Jimmy. Can you get his password for me? It should be in the users table +--- + ## Desarrollo Esto es uso de SQL, tenemos que encontrar el usuario Jimmy en la tabla users diff --git a/2019/neverlan/sqlfun2.md b/2019/neverlan/sqlfun2.md index f7c8474..459c262 100644 --- a/2019/neverlan/sqlfun2.md +++ b/2019/neverlan/sqlfun2.md @@ -1,9 +1,9 @@ # SQL Fun 2 ---- - (Web, 50) A Client forgot his Password... again. Could you get it for me? He has a users account and his Lname is Miller if that helps at all. Oh! and Ken was saying something about a new table called passwd; said it was better to separate things. +--- + ## Desarrollo Para este caso fue necesario hacer una union entre las distintas tablas. diff --git a/2019/neverlan/thingsarenot.md b/2019/neverlan/thingsarenot.md index bb09304..b2cd494 100644 --- a/2019/neverlan/thingsarenot.md +++ b/2019/neverlan/thingsarenot.md @@ -1,9 +1,9 @@ # Things are not always what they seem ---- - (Web, 50) If you can't find it you're not looking hard enough. +--- + ## Desarrollo Revisando el código fuente de la página encontramos la flag. diff --git a/2019/tamu/nasc.md b/2019/tamu/nasc.md index 7dbeaba..6a09416 100644 --- a/2019/tamu/nasc.md +++ b/2019/tamu/nasc.md @@ -21,7 +21,7 @@ Bastaba con formular una oración como la siguiente: ```sql SELECT * FROM usr WHERE usuario='u' AND contrasena='' OR '1' = '1'%% ``` -Bastó con llenar los campos de la siguiente manera: +Se llenaron los campos de la siguiente manera: Usuario: root Paswwrod: ' OR '1'='1