[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10,"_11":12,"_13":14},"actionData","errors","root",{"_172":173,"_174":167},"routes/_root/_root",{"_169":-7,"_42":170,"_147":-7,"_171":-7},"routes/_root.challenges",{"_38":165,"_166":167,"_168":16},"routes/_root.challenges.$challengeCanonical+/_root",{"_78":79,"_80":81,"_82":83},"routes/_root.challenges.$challengeCanonical+/writeups",{"_15":16,"_17":16,"_18":19,"_20":21,"_22":23},"solved",false,"hasWriteup","writeups",[24,25,26,27,28],"name","Kakuzuke","canonicalName","kakuzuke",{"_29":71,"_31":72,"_33":73,"_35":16,"_36":16,"_37":16,"_38":74,"_40":75,"_42":43,"_44":16,"_45":76},{"_29":64,"_31":65,"_33":66,"_35":16,"_36":16,"_37":16,"_38":67,"_40":68,"_42":43,"_44":16,"_45":69},{"_29":58,"_31":59,"_33":60,"_35":16,"_36":16,"_37":16,"_38":39,"_40":61,"_42":43,"_44":16,"_45":62},{"_29":50,"_31":51,"_33":52,"_35":16,"_36":16,"_37":16,"_38":53,"_40":54,"_42":43,"_44":16,"_45":55},{"_29":30,"_31":32,"_33":34,"_35":16,"_36":16,"_37":16,"_38":39,"_40":41,"_42":43,"_44":16,"_45":46},"author",{"_20":47,"_48":49},"writeupElementId","6a2a3dd2","writeupId","6a2a3dd2-a334-4ece-a7d3-091ca62a16b4","canEdit","canLike","likedByViewer","title","Writeup for Kakuzuke","url","https://github.com/tadanobutubutu/kakuzuke-solve/blob/main/README.md","language","ja","isOfficial","createdAt",["D",1779304048299],"tadanobutubutu","gravatarHash","32d088d6e11be98c7280952c1fdfeb6a6ee1b5056555fe814e35720483c99e51",{"_20":56,"_48":57},"ee44bdbf","ee44bdbf-b75a-4197-b54f-0b87c38ffc4a","Writeup for Daily AlpacaHack 5/17-5/23","https://www.notion.so/kakur41-wrteup/Daily-AlpacaHack-5-17-5-23-363da8520c02816881a1f0af2df44808?source=copy_link",["D",1782623695416],"kakur41","b38a5e77015b23df77d112279a16aaba1c929e984106792bf5505dff367d67fa",{"_20":63,"_48":-5},"a3885446","a3885446-e807-4832-bb1c-3ff6eab1494b","https://github.com/goroshirow/CTF-WriteUps/tree/main/AlpacaHack/2026May/Kakuzuke",["D",1779291541401],"goroshirow",{"_20":70,"_48":-5},"d310fb90","d310fb90-5f0c-4c48-9aa2-0924cad23bc5","Writeup for Daily AlpacaHack 5/18-5/24","https://pan-pudding.com/contents/1780116377190.html",["D",1780116685783],"labpump",{"_20":77,"_48":-5},"c851fbc7","c851fbc7-ef93-491e-b87e-88bef71410de","Daily AlpacaHackに挑戦するつくよみちゃん 05/20 web/Kakuzuke/tchen","https://www.nicovideo.jp/watch/sm46336634",["D",1779292982837],"tsukuyomi-chan","challenge",{"_20":21,"_22":23,"_87":88,"_89":90,"_91":92,"_93":94,"_95":96,"_97":98,"_99":100,"_101":102,"_103":16,"_104":-7,"_105":106,"_107":-7,"_108":-7,"_37":16,"_109":110,"_111":112,"_113":16,"_114":-7,"_115":16,"_116":-7,"_117":-7,"_118":119,"_120":-7,"_121":-7,"_122":-7,"_123":124,"_125":16,"_126":124,"_36":124,"_127":-7,"_128":129,"_130":131,"_132":133,"_134":135},"availablePages",[84,85,86],"canonicalUrl","https://alpacahack.com/challenges/kakuzuke","Description","Solves","Writeups","solves",120,"difficulty",50,"flagFormat","Alpaca{...}","categories",[162],"attachments",[158],"remote",{"_155":156,"_157":124},"description","CTF Player Ranking Test\n

Beginner Hint 1: Overview of the Challenge

\n\n- In `POST /`, you can read files under the `choices` directory.\n- The goal is to read `/flag.txt`.\n- Strings like `../` do not seem to be filtered, but the 5-character limit appears to prevent path traversal.\n\n

Beginner Hint 2: How to Approach the Challenge

\n\n- The code assumes that `req.body.choices` is a string, but is that really true?\n- However, you cannot send JSON. You need to send the body as `application/x-www-form-urlencoded`.\n\n

\n","descriptionJa","CTFプレイヤー格付けチェック\n

初心者向けヒント1: この問題の概要

\n\n- `POST /`では、`choices`ディレクトリ下のファイルを読み込むことができます\n- 目標は`/flag.txt`を読むことです\n- `../`のような文字列はフィルタリングされていないようですが、5文字の制限によりパストラバーサルが防がれているように見えます。\n\n

初心者向けヒント2: 問題のアプローチ

\n\n- `req.body.choices`は文字列であるという前提のコードですが、果たして本当にそうでしょうか？\n- ただし、JSONを送ることはできません。`application/x-www-form-urlencoded`でボディを送る必要があります。\n\n

\n","descriptionRequiresSignIn","changeLog","authors",[152],"solvedAt","solvedAtInContext","ctfChallenges",[],"tags",[149],"submitAsCtfChallenge","ctfCanonical","ctfEnded","point","solvesCtfChallenge","classification","medium","isMirror","ctfParticipants","ctfMode","isDailyChallenge",true,"canCheckFlagWithoutSubmission","canCreateInstance","dailyProgramCanonicalForAction","previewProgramCanonicalForAction","daily-alpacahack","dailyChallengeSlot",{"_136":137,"_118":119,"_138":139,"_140":141,"_142":143,"_144":145},"nextDailyCanonical","python-impossible","httpsProxyHostname","kakuzuke.chal.alp4ca.com","program",{"_22":129,"_20":146,"_147":148},"scheduledDate",["D",1779202800000],"releaseAt",["D",1779202800000],"status","PUBLISHED","plannedTopic","LFI","Daily AlpacaHack","timeZone","Asia/Tokyo",{"_20":150,"_22":151},"Local File Inclusion","local-file-inclusion",{"_20":153,"_48":154},"tchen","df01bfb2031cc27361ba3bf749a2c9ccc4ba83bc6fe7b059875628a9fd9d9573","instances",[],"canSpawn",{"_159":160,"_40":161},"fileName","kakuzuke.tar.gz","https://alpacahack-prod.s3.ap-northeast-1.amazonaws.com/12799bbe-dacb-49eb-b38b-74eb978760f2/kakuzuke.tar.gz",{"_20":163,"_22":164},"Web","web","Challenges","query","","isLoggedIn","user","en","timeZoneAbbr","clientConfig",{"_175":176,"_177":124,"_178":179,"_180":179,"_181":182,"_183":184,"_185":16,"_186":167},"cspNonce","firebaseOptions",{"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":182},"isVercel","env","production","envName","gaTrackingId","G-FJX5L5Y9FE","turnstileSiteKey","0x4AAAAAAAfYTP7SUci3nVKW","isSpawnerUnderMaintenance","spawnerMaintenanceNotice","apiKey","AIzaSyDGInmUCFubPOqJWQCw3LBB-XZGj9LX4l4","appId","1:691353492123:web:4ae258ec8c620e63f0443e","projectId","alpacahack","authDomain","alpacahack.firebaseapp.com","messagingSenderId","691353492123","measurementId"]