2018 Triathlon Assessment Questions IOS99

This is the part I copied from the Internet.

2.IOS

Problem Solving Links: http://ctf4.shiyanbar.com/web/IOS/index.php

This page prompted the system to upgrade to IOS99, we can think of modifying user-agent to cheat.

For User-agent, please refer to my blog post to understand. The User agent is a special string header that provides access to the Web site with information such as the type and version of the browser we use, the operating system and version, the browser kernel, and so on. This parameter is automatically submitted when we visit the Web page. With this logo, the websites we visit can display different layouts to accommodate our browsers and provide a better experience.

We can search the Internet for an example of a IOS99 user-agent value, or we can construct it ourselves, for example

mozilla/-likeMac OS X) applewebkit/0 safari/536  

Upon request, we will be able to obtain flag after submitting the information.

The browser identification, operating system identity, rendering engine identity, and version information are detected here. Incidentally, the last browser field, you can only use Safari, you change to another browser is not,

Because Safari is a browser developed by Apple, it is also the default browser specified by iOS in iphone, Ipodtouch, ipad tablet.

However, when I tested it, I found that some flag would appear, others would not. I was depressed, then the teaching of the younger brother, and suddenly hit his face, back to the dorm, did the following test

IOS6 mozilla/5.0 (IPhone; CPU iPhone os-like Mac os X) applewebkit/534.46 (khtml, like Gecko) version/5.1 mobile/9b206 safari/7534.48.3

iOS5 mozilla/5.0 (IPhone; CPU iPhone os-like Mac os X) applewebkit/534.46 (khtml, like Gecko) mobile/9a405 safari/7534.48.3

iOS4 mozilla/5.0 (IPhone; U CPU IPhone os in the like Mac OS X; JA-JP) applewebkit/533.17.9 (khtml, like Gecko) version/5.0.2 mobile/8j2 safari/6533.18.5

Ios3 mozilla/5.0 (IPhone; U CPU IPhone os in the like Mac OS X; JA-JP) applewebkit/528.18 (khtml, like Gecko) version/4.0 Mobile/7e18 safari/528.16

This is a few user-agent I find on the Internet . burp grabbed the bag, then sent to repeater after the change user-agent, I just tested the above several , found above ios6,ios5 echo appears flag,ios4,ios3 Flag cannot be echoed back . after comparison found

found if the iphone has U after it; , it won't echo back. Flag . So on the internet casually looking for iOS user-agent to change the version number to a . have a U; If you delete it, you can do so directly.

Note: Delete U when you pay attention to the space, the blank should also be deleted, or it will not be echoed

2018 Triathlon Assessment Questions IOS99