
倧åå©CTFã®ãžã£ã³ã«ãIPPONãéå°è§£èª¬
ASUSN CTFéå¶ã¡ã³ããŒã®ã¢ã¹ãŒã¹ã³ã»ãªã³ã©ã€ã³ã§ãã
ãASUSN CTFããšãã倧åå©ãžã£ã³ã«ã®ãã颚å€ãããªCTFãéå¬ããŠä»å¹Žã§2幎ç®ãšãªããŸããã

倧äŒéå¬äžã¯ãäž»å¬è ã§ããèªåããããããããšæãåçãæåã§IPPONå€å®ïŒæ£è§£æ±ãã«ïŒããŠãããŸããæ°æéã«äžåºŠãããã®é »åºŠã§è¡ãããŸãã

éå¶åŽã§ã¯ã©ã®ãããªå€æåºæºã§IPPONå€å®ã«ããŠããããåæã«ç¶ŽãããšæããŸãã
å€å®ã«çæãäžæºããã£ãŠæžãã«è³ã£ãããã§ã¯ãªãã什åããã³ãããŸã®ã挫æéå°èå¯ããèªãã§ãèšèªåããããªã£ãçããã€ã ãšæã£ãŠãããŠãã ããã
ãžã£ã³ã«ãIPPONãã®ããã
ãžã£ã³ã«IPPONãéå¬ãã倧ããªå©ç¹ã§ãããéå¶åŽã楜ããã§ãã
æ³åããŠããªãã£ããããããåçããã³ãã³å±ãã®ã§ãåçãçºããªããããããã£ïŒããããããããããã£ã¡ãããïŒããšå£°ãåºããŠç¬ã£ãŠããŸãã
ãã²ããµãŒã¯ã«çã§CTFãäž»å¬ããæ©äŒãããã°ããžã£ã³ã«IPPONãåãå ¥ããŠã¿ãŠæ¬²ããã§ãã
ãã®ãšãã¯å¿ ããããã®èšäºã«æžããŠãããããªã«ãŒã«ã§ãããªããŠããã§ããCTFãã¯ã€ã¯ã€æ¥œããçãäžãããã©ããã第äžã«åªå ããŠãã ããã
ãé¡ã®éžå®
倧åå©ã®ãé¡ãéžã¶ã®ã¯ãªããªãé£ããã§ãã
CTFã®åå è
ã¯ãç¬ããåŸæãªããã§ã¯ãªãã®ã§ããã®ãããªäººã§ãåçãæãã€ããããå
容ã«å¯ãæ·»ãããšã倧åã ãšæã£ãŠããŸãã
ïŒæåºãããåçãé©ãã»ã©ç§éžãªã®ã§ãCTFãã¬ã€ã€ãŒã¯ãç¬ããåŸæèª¬ãæµ®äžããŠããŸããïŒ
ãšã³ãžãã¢ãçãããããããã°ã©ãã³ã°ãããã»ãã¥ãªãã£ãã«é¢ãããé¡ã«ããŸãã
èªåãæ®æ®µãè·æ¥ç
ã ããã£ãŠæãããšãšããããããããªãã§ããããã
åèãŸã§ã«ããããŸã§ã®ãé¡ãæžããŠãããŸãã
2023幎
Python100ãç»å ŽïŒãã®é©ãã®æ°æ©èœãšã¯ïŒ
ããªãã®ããããã®ãã¹ã¯ãŒããæããŠãã ãã
ããžã¿ã«å€§è£ããã£ãã·ã³ã°ã«åŒã£æãã£ãïŒã©ããªãµã€ãïŒ
2024幎
å°æ¥ããå®å®äººããšã©ãŒãåãããã©ããªãšã©ãŒïŒ
ãã°ãã°ã®å®ã®èœåè ãäžäœäœãã§ããïŒ
ä»å¹Žã®æŒ¢åãªãã¬ãä»å¹Žã®Unicodeãã2024幎ã®äžçžã衚ãUnicode1åãšã¯ïŒ
倧åå©ã£ãœãããããŸããã
æ³å®è§£ãèããŠã¿ã
ãã©ãšãã£ã«å¯ãã åçãããããåºãŠãããããªå±éãæåŸ
ã§ãããé¡ãæãŸããã§ãã
ããã€ããé¡ã®ã¢ã€ãã¢ãåºããäžã§ãèªåãåçãèããŠã¿ãŠãæãã€ãããããšããããããé«ããªããé¡ãéžã³ãŸããã
å°æ¥ããå®å®äººããšã©ãŒãåãããã©ããªãšã©ãŒïŒ
åçïŒASSERT: planet.peace does not exist. ïŒå¹³åãååšããŠããŸããïŒ
ç®èã£ãœãå 容ã®åçãäœãããã§ãããªã
ããã®å€æã±ãŒãã«èª°ã䜿ããã ãïŒäœãšäœã®å€æïŒããšãããé¡ãèããããããŸããããæ²¡ã«ããŸããã
ãçŽã¹ãããŒãšType-Cãã¿ãããªãæãã€ãã«ããäžã«ãã€ãã€ãã§ã¯ã³ãã¿ãŒã³ãªåçã ããã«ãªã£ãŠããŸããããªäºæãããŸããã
ãé¡ã¯å ·äœçã«
ãé¡ã¯å
·äœçãªæ¹ãèããããã§ãã
次ã®ãé¡ã¯ã©ã¡ããã¢ã€ãã¢ãåºããããã§ããããã
æªæ¥ã®ããã°ã©ãã³ã°èšèªïŒãã®é©ãã®æ°æ©èœãšã¯ïŒ
Python100ãç»å ŽïŒãã®é©ãã®æ°æ©èœãšã¯ïŒ
ããã ãšãäžã®ãé¡ã®æ¹ãèãããããšæããŸãã
ãPythonç¹æã®ããããããæªæ¥ã§ã¯ã©ããªã£ãŠããã ãããã
ãPython100ã£ãŠé¥ãæªæ¥ã ãããå°åºäžå¯èœãªãã¡ã³ã¿ãžãŒèŠçŽ ãå
¥ããŠã¿ããã
ãšããèããã§ããããã«ãªããŸãã
äžæ¹ã§ãäžã®ãé¡ã¯ãèããããšãå€ãããŠãèããåŽãå°ã£ãŠããŸããŸããã©ã®èšèªãåèã«ããã°ãããã©ããããã®æªæ¥ã®ãã©ããªæ©èœãªãã§ãããã
ããã£ãã·ã³ã°ã«åŒã£æãã£ããã®ãé¡ããããžã¿ã«å€§è£ãããšå ¥ããããšã§ãããããããæ Œæ®µã«å¢ããŸãããã裞ã®å°æ± çŸååããšãããååçãèªçããŸããã
éå¶ãããããªåçãèŠãããšæããã
ããã¯å°ã 岿 ¢ãªæ°ãããŠããŸããŸãããåããããåå è ãããããªåçãèŠãããšæãããšããããšã§ãã
ãä»å¹Žã®UnicodeããªããŠãèªåãã¡ãç¥ããªããããªãããããåçã絶察ã«å±ããŸãããããã¯ã¯ã¯ã¯ããŠããŸããã
IPPONã®å€å®åºæº
ããããæ¬é¡ã§ãã
ã©ã®ãããªåºæºã§IPPONãšããŠããããæžããŠãããŸãã
ãªããä»å¹Žã®å€å®ã¯CTFdã®Incorrect Submissionsã®äžæ£è§£åçäžèЧãããCorrectã«å€æŽããããšã§IPPONãšããŠæ£è§£ã«ãªãä»çµã¿ã§ããã
å€å®ããéã¯ããŠãŒã¶åãäŒããŠããŸãã
ãããèªãã ãåå è
ãIPPONãåãããããªãæ»ç¥æ³ã®ãããªãã®ã§ã¯ãããŸããã
ããã§äžæ¡çšãšããããããªå
容ã§ããç¹å¥ã«ããããããŠIPPONãšããŠããåçããããŸãã
ãããå¿
åæ³ã¯ãæ·±ãèããã«èªåãããããããšæã£ãåçãããããéãããšã ãšæããŸãã
å ±éã®å€å®åºæº
ã©ã®åé¡ã«ãããŠãå ±éã®IPPONå€å®åºæºãšããŠä»¥äžãæºããå¿ èŠããããŸãã
倧åã®åå è ïŒãšã³ãžãã¢ïŒã«ãšã£ãŠããããããšæããã
ããªãã¡ããå人çãªå
容ããããšã³ãžãã¢ã«äŒããã«ããå
容ãã¯éžã°ãã«ããã§ãã
å
·äœçã«ä»¥äžã®ãããªåçã¯äžæ¡çšãšãªã£ãŠããŸãã
ããã³ãããŒã¯ãåãã¹ã¿ãããã³ãã»ãŒããšã«ãã³ãããŠãŸãŒãããïŒãç¬ã奜ãã«ããäŒãããªãããïŒâ»
ãã¢ã¹ãŒã¹ã³ãXXXãããã®ãããªå 茪ãª/äž»å¬åŽãç«ãŠããããªå 容
ãã以å€ã¯åé¡ã«ãã£ãŠå€å®åºæºãç°ãªããŸãã
åé¡ããšã«å
·äœçãªåçãäŸã«è§£èª¬ããŠãããŸãã
å®å®äººããšã©ãŒãåãããã©ããªãšã©ãŒïŒ
ãã®ãé¡ã«ã¯äž»ã«2ã€ã®æ¹åæ§ããããŸããã
â æ®æ®µèŠããããšã©ãŒãå®å®äººã§ãçºçãããã ïŒãšããæ¹åæ§
No space left on mother planet.
確ãã«ãªïŒå°çããäœããå ŽæãªããããªïŒãšããå
容ã§ãã
ããããªãšã©ãŒãèããããŸãããå®å®äººãæ¥ãã·ãã¥ãšãŒã·ã§ã³ã«åããã©ããããéèŠã§ããã
äŸãã°ãsegmentation faultãã ãã ãšãå®å®äººãã©ãããŠã»ã°ãã©ã«ãªãã®ãããŸããã³ãšæ¥ãŸããã
äžæ¹ã§ã以äžã®åçã¯ã
301 Moved Permanently
人é¡ãå°çããç§»äœããã®ãïŒãšããå å®¹ãæ±²ã¿åããŸããå 容ãåã£ãŠããŠããŸããšæããã°IPPONã§ããã
â¡å®å®äººãããæªç¥ãªæ¹åæ§
error: expected `ؚ؞٩?â£ï¢ÙÛÆØ¡!Ꮊâµâ§«ØºâÎ`, found `English`
ãããªããã w å®å®äººã ãªããšããå
容ã§ãã
æ¢åã®ãšã©ãŒã«å¯ããŠãããŠãããããâ ãšäŒŒãŠããŸããããããå®å®äººããšã©ãŒãèµ·ããããããšãããé¡éãã®è§£éã§ãã
æå€æ§ãé©ããããåçãIPPONã«ãªã£ãŠããŸããã
ã·ã¹ãã ã«é倧ãªãšã©ãŒãèŠã€ãã£ãããããã®æãåèµ·åããŸãã
ãªã©ãããã§ããããã¡ãã£ãšåŸ ãŠïŒåèµ·åãããªïŒwã
ã¬ãã¬ããã€ã³ã¿ãšã¯ã»ãã·ã§ã³
ã¯ãäžææã¡ã§ããããšç¬ã£ãŠããŸããŸããã
ãã°ãã°ã®å®ã®èœåè ãäžäœäœãã§ããïŒ
è¶ èœåç³»ã®äœåã«ãã°ã®èœåè ãç»å Žããéã«ãã©ã®ãããªã¯ã³ã·ãŒã³ãèŠãããã§ãããããããããå±éããããããïŒãšããæ¶ç©ºã®åã·ãŒã³ãæ³åã§ããã°IPPONã§ãã
ãããã°ç°å¢ã§åçŸã§ããªããã°ãæ¬çªç°å¢ã§çºçããããã
æ³å®ããŠããåçãå±ããŠæåããŸããã
Productionç°å¢ã§ããåçŸããªããã°ã¯åä»ãªã®ã§ããžã§ãããŠããã
ç¬ãæ¹ããã°ã°ã°ã°ã°ã°ã°ã°
ã¯ã³ããŒã¹ããã®åçããããŸããããã¯ã³ããŒã¹ç¥ããªã人ã§ããªããšãªããããå 容ã§ããããããã°IPPONã«ããŸããã
ãOne PieceãèªäœãUndefinedã«ãªããååšããªãå®ã«âŠ
ããã£ïŒå®ããªãã£ãŠããžããïŒã§ããããã ãåéºã楜ãããããªïŒã
ãFINã
0ã§å²ãã
ããªã«âŠïŒ 0ã§å²ããâŠã ãšâŠïŒã
ããããã®0é€ç®ã¯ãšã©ãŒãã£ããã貫éããã®ãïŒæ¬¡ã®æåãªããŠèª°ãèªãããšãã§ããŸãïŒãã°ã°ã°ã°ã°ã
ãã°æ²ç·ãçºæ£
ãäœïŒïŒãã°æ²ç·ãâŠâŠçºæ£ããŠãããïŒã
ããããªãã«ãªâŠãªãªãŒã¹ã«åããŠãããŠåæããŠããã¯ããªãã ãïŒã
ããããããããããããã
ïŒçœãå
ã«å
ãŸããŠæ¶æ»
ïŒ
CVEçªå·ãèªåšã«çæãããã®åºŠã«æ°ããªè匱æ§ãçãŸãã
ãããããCVE-2025-65537ã
ããããããããããããããã
ïŒäžçåå°ã§çªåŠå€§èŠæš¡é害ãçºçïŒ
匷æµã§ãããããããªåã·ãŒã³ãç»å ŽããŠæ¥œããã£ãã§ãã
ä»å¹Žã®æŒ¢åãªãã¬ãä»å¹Žã®Unicodeãã2024幎ã®äžçžã衚ãUnicode1åãšã¯ïŒ
ããã¯é£ãããé¡ã ã£ããšæããŸãã
èãæ¹ãšããŠã¯ã2024幎ã®ä»å¹Žã®æŒ¢åããã20ãããããã£ãœãUnicodeãæ¢ãã®ãããã£ãã®ããªãšæããŸããã
æ¡ç¹åŽã«ã¯è¬ã®1æåãããããå±ãããããããã©ã®ããã«ä»å¹Žãšçµã³ã€ããŠããã®ãããšã¹ããŒã§æšæž¬ããŠããŸããïŒç¬ïŒ
ãð§ãïŒå¬éçŽåŒå®ããïŒã¯ãå€ã®æãã«ãããæããšããæŒ¢åã®Unicode衚çŸãªã®ã ãšæãããŸãã確ãã«äœ¿ããããã ãªïŒãšæã£ãŠIPPONã«ããŸããã
ãã®ãé¡ã«ã¯ãè¯ãæµãããããŸããã
2024å¹Žã®æŒ¢åãéãã«é¢ããŠãéšéŠãšããŠã®éïŒU+F90Aã§ã¯ãªãU+2FA6ïŒïŒNASU41ããïŒãç®åãã«ãããããªéãã©ãã©ãçºæãããŠãããŸããïŒ
ãããïŒnananoriããïŒ
ãé€ãïŒsuisanããïŒïŒ2024幎ã®1äœãéããš10äœãç±³ãã®åäœïŒ
ãéãïŒgummyããïŒ
ãé«ãïŒãã
ãããããïŒ
ãðš°»ãïŒsirumaããïŒ
ãðãïŒJUCKããïŒïŒéãæå³ããé¬éè¡ã®èšå·ïŒ
ãéããšããæŒ¢åããããªæå³ã蟌ããããŠããŸãããUnicode1æåã§ããããªéããã£ãã衚çŸãããŠããŠçŽ æŽãããã£ãã§ãã
ãâïžâð¥ãïŒhamayanhamayanããïŒã®ãããã¯ãã§ãŒã³ãç Žå£ãããçµµæåã¯ãä»å¹Žã®åºæ¥äºã象城ããŠããŠããããªçµµæåããã®ããwãšããç§éžãªåçã§ããã
ããããã話ã«ãªããŸãããæåã®IPPONãåã£ãã®ã¯ããèãïŒTan90909090ããïŒãšããæŒ¢åã§ããã
ããã¯ãä»å¹Žã®Unicodeãšãããé¡ã«ãããããããããããUnicodeãå·®ã眮ããŠèãšããæŒ¢åãéžã°ãããšããéè¡ãããããããã§ããã
ãã以å€ã¯çŽç²ãªæŒ¢åã®åçã®IPPONã¯äžããŠããŸããã
ð°»ð°»éººã®ãð°»ãã®åã¯ãå€å®ã«ããªãè¿·ããŸããã
ãã¡ããã®éººãM-1ã°ã©ã³ããªã®ä»€åããã³ã®ãã¿ã«ãç»å ŽããããiPhoneã§è¡šç€ºã§ããããã«ãªã£ããããæåã«ãªããŸããã確ãã«ä»å¹Žã®åãšããŠã¯çžå¿ããã£ãã®ã§ãããæ¬å®¶ã®ä»å¹Žã®æŒ¢åã§ãéžã°ãåŸããã®ã§ãUnicodeã§ããå¿
èŠã¯ãªããšããçç±ã§æãããäžæ¡çšãšããŸããã
倧äŒååãšåŸåã®éžã°ãæ¹ã®éã
åºç€ã®åçã¯ãããã®ãããªåçãIPPONã§ããããšããæ¹åæ§ã瀺ãéèŠãªåœ¹å²ãæãããŸããåå è
ã®åçãä¿ãããã«ããŸãã¯ãææ¬ãšãªããããªåçãéžã³ãŸãã
ãé¡ã®è£ãè¡ãåçããæå³äžæã ãã©ãããããåçãªã©ã¯ãæåã®æ¹ã«ã¯IPPONå€å®ãäžããŸããã§ããããé åããèŠèšãã£ãŠåŸã«IPPONãšããŠããŸãã
ããããªåçãå ¬éãããŠããåŸåã¯ãä»ãŸã§ã®åçã«è¢«ããªããããªåçãæ±ããããŸããæè¡šãçªãåçãçµæçã«ãããããã£ããããŠéžã°ããã®ãå€ãæ°ãããŸãã
åçç¹
10ç¹æºç¹äž10ç¹ã®åçããIPPONãäžããããšãã§ããŸããã
æ¬å®¶ã®å€§åå©å€§äŒã§ã¯ã8ç¹ã9ç¹ãªã©ã®äœç¹ã ã£ããããã£ãŒãããã¯ãããŸãããASUSN CTFã§ã¯IPPONãåŠãã®å€å®ããããããŸããã
8ã9ç¹ã®éåžžã«æããåçã¯ãããããããŸããã
ããäžå·¥å€«ã§ãããã®ã«ãªïŒãšããæããããã£ãŒãããã¯ã§ããä»çµã¿ãäœãããã°ããã£ãã§ãã
ãŸãã1人ã«å¯ŸããŠ1ã€ã®åçããæ£è§£ã«ã§ããŸãããæ¡ç¹ãããŠããã¿ã€ãã³ã°ã§ã3ã€IPPONãšãããæã£ãåçãå
šãŠåã人ã ã£ãããšããããŸããããã®ãããªå Žåã«ãæ³£ãæ³£ã1ã€ã®åçãéžã°ãªããã°ãªããªãã®ããã£ãããªãã£ãã§ãã
åŸç¹ã«ãªããªããŠããæ£è§£åŸã«åçã§ããä»çµã¿ãšããã®ãçšæãããã£ãã§ãã
åè
IPPONã®åçãdiscordã«éç¥ããpluginãGitHubã§å
¬éããŠããŸãã
ãæŽ»çšãã ããã
ã¡ãªã¿ã«ã2023幎ã¯ãcorrectæ±ããšããã«ãAwardã§999ç¹ãä»äžãããšããæ¹æ³ã§IPPONæ±ããšããŠããŸããã
äžèšã®pluginã¯äœ¿ããŸãããã1人ã«ã€ãè€æ°åçãIPPONå¯èœãªã®ã§ãããæ³¢ä¹±ã®å±éã«ãããå Žåã¯ãã®æ¹æ³ã§ïŒ