以下の内容はhttps://kataware.hatenablog.jp/entry/2024/05/23/215640より取得しました。

HTB Business CTF2024 Writeup(Cloud Protrude)

はじめに

HTB Business CTF 2024にTeam NEC Corporationとして参加してました。順位は70位、私はCloudのScurried, Protrude, MetaRootedとForensicのCaving、CryptoのeXciting Outpost Recon、RevのFlagCasinoを解きました。ほぼVeryeasy....

Writeupは公式のGithubがありますが、私の記憶が間違いでなければCloud Protrudeの問題のFlagが違うのではと思ったので記録として残しておこうと思います。

GitHub - hackthebox/business-ctf-2024: Official writeups for Business CTF 2024: The Vault Of Hope

Cloud Protrude

問題としてはAWSのアクセスキーが与えられるのでそれをもとにflagを見つけます。

Access key ID,Secret access key, region name
AKIAXYAFLIG2JE6MC2SY,teWVv0GzIBKS23uozxUGmUH+muE5XB86fnZmRZXu, us-east-1

まずはaws configureコマンドでアクセスキーを設定します。そのあとHacktricksの内容を見つつEnumerationするとaws ds describe-directoriesコマンドで情報が入手できます。

└─$ aws ds describe-directories 
{
    "DirectoryDescriptions": [
        {
            "DirectoryId": "d-9067e0513b",
            "Name": "vault101.wasteland.local",
            "ShortName": "VAULT101",
            "Size": "Small",
            "Alias": "vault101",
            "AccessUrl": "vault101.awsapps.com",
            "DnsIpAddrs": [
                "172.31.87.164",
                "172.31.31.15"
            ],
            "Stage": "Active",
            "LaunchTime": "2024-04-28T17:47:14.630000-04:00",
            "StageLastUpdatedDateTime": "2024-04-28T17:54:13.623000-04:00",
            "Type": "SimpleAD",
            "VpcSettings": {
                "VpcId": "vpc-0d7b2c5c8509574bd",
                "SubnetIds": [
                    "subnet-0a5022ff1dfdf5518",
                    "subnet-0574f58cd2d4f85ca"
                ],
                "SecurityGroupId": "sg-0bee7f241cef79345",
                "AvailabilityZones": [
                    "us-east-1a",
                    "us-east-1d"
                ]
            },
            "SsoEnabled": true,
            "DesiredNumberOfDomainControllers": 0
        }
    ]
}

AWS - Directory Services / WorkDocs Enum | HackTricks Cloud | HackTricks Cloud

WorkdocsのURLがvault101.awsapps.comであることがわかります。そのままHackTricksに書いてあるようにdescribe-activitiesで内容を確認していきます。

$ aws workdocs describe-activities --organization-id d-9067e0513b
{
    "UserActivities": [
        {
            "Type": "DOCUMENT_VERSION_VIEWED",
            "TimeStamp": "2024-05-18T12:36:36.297000-04:00",
            "IsIndirectActivity": false,
            "Initiator": {
                "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
            },
            "ResourceMetadata": {
                "Type": "document",
                "Name": "flag.txt",
                "Id": "5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303",
                "Owner": {
                    "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
                }
            }
        },
        {
            "Type": "DOCUMENT_VERSION_UPLOADED",
            "TimeStamp": "2024-05-18T12:15:38.010000-04:00",
            "IsIndirectActivity": false,
            "Initiator": {
                "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
            },
            "ResourceMetadata": {
                "Type": "document",
                "Name": "flag.txt",
                "Id": "5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303",
                "Owner": {
                    "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
                }
            }
        },
        {
            "Type": "DOCUMENT_RECYCLED",
            "TimeStamp": "2024-05-18T12:15:25.001000-04:00",
            "IsIndirectActivity": false,
            "Initiator": {
                "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
            },
            "ResourceMetadata": {
                "Type": "document",
                "Name": "flag.txt",
                "OriginalName": "flag.txt",
                "Id": "77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3",
                "Owner": {
                    "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
                }
            }
        },
        {
            "Type": "DOCUMENT_VERSION_VIEWED",
            "TimeStamp": "2024-05-02T15:19:09.840000-04:00",
            "IsIndirectActivity": false,
            "Initiator": {
                "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
            },
            "ResourceMetadata": {
                "Type": "document",
                "Name": "flag.txt",
                "Id": "77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3",
                "Owner": {
                    "Id": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b"
                }
            }
        }
(snip)

flag.txtが存在しており、この問題のflagっぽいことがわかります。

aws workdocs get-document --document-id <doc-id>でファイルを入手できます。

$ aws workdocs get-document --document-id 77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3
{
{
    "Metadata": {
        "Id": "77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3",
        "CreatorId": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b",
        "ParentFolderId": "94e9703302611d8aa338d1c30999705e8049ee1582a1c5786b0a7eda3c16ea3c",
        "CreatedTimestamp": "2024-04-28T18:24:09.164000-04:00",
        "ModifiedTimestamp": "2024-05-18T12:15:25.001000-04:00",
        "LatestVersionMetadata": {
            "Id": "1714343049164-81272441b82c9b001b5dc02d4cc08291587c9fc374f03ac27a71773271311aea",
            "Name": "flag.txt",
            "ContentType": "text/plain",
            "Size": 34,
            "Signature": "d2e51309fefb4b367def2c26cb725048",
            "Status": "ACTIVE",
            "CreatedTimestamp": "2024-04-28T18:24:09.164000-04:00",
            "ModifiedTimestamp": "2024-04-28T18:24:09.164000-04:00",
            "CreatorId": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b",
            "Thumbnail": {
                "LARGE": "https://gb-prod-doc-source.s3.amazonaws.com/77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3/1714343049164-81272441b82c9b001b5dc02d4cc08291587c9fc374f03ac27a71773271311aea/PDF_LARGE?response-content-disposition=attachment%3B%20filename%2A%3DUTF-8%27%27LARGE&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQCUMeJacU%2FMa3ONPQr5cGHSxYgfisdbTCfvqdCSFIQTjQIhAMDGtj2wNRhSKF2bynLMO8r5qEd0CtRMYePa42r0GGw1KtUDCBIQABoMOTczMTg3NTUzMDI3Igx%2BNLBqvBicttm1%2F%2BIqsgPRPBl8WHj07L8cwomPgFSvwKvkMKkkGRoEvDLEf%2FOCYfVOAehgUUZXXq%2BgXeOrGS%2F%2Fi64iErJ5eyovacvq%2B%2B7xEef6%2FixOcXfhQGmCt1GnjuhKJPCKmKFu5JVias6RSgMO2ANUh08IQS9J67aZT0BcOID5wDy%2B9i09TQBVleRxvKZ%2BZ4ihsNIgGvvhBA33RsJfBlj5Ary3SuE%2Fhf2k8YzZuRcW9qVg27yrUCcWoKCJGFpU5oOqH0rzFYiqBfXPZwla3ZIL4Fi%2BVNn62uUGxRkDMZPkpx%2BRN14Rpdv8i2ttnIgZSEMDnOTYtl5sgRR8r7eViHVdzoTXoyccZxsnzrKC%2FFQRNQwvFwwHqOShTk8EZlMh1HOw7LHXz0Opua4kCaEZBAeICDDE1YzOApR2UWFbLJ6JtMPdWoFSo8oh4khOe4BqdMpq87%2FvSsGpxaefo%2BDcXi190bMnDx%2FvZo5hfuCxw%2B356PWCY16rd6tlAzKmAayTIXTPMT9GCkQtqM49SzBmj2aZcx6rn4T%2FHhu9BxUv%2BjMJWScRo4UstxbKslrSaT%2FUhIv899BnT486eRAi6uMgZzDz86ayBjqgAaSVq821v2pVjoIIWxyNJWlSl8odH1y8z9si0OvYdPi1c5Q6nexvFwiYFb13t23virhMO7tHdsNjzE2cxnQOj8Kf3f91q2l8a6Ijb%2Bj0hDspn8kSf3Q%2FdPsAyC9rn%2B7MVgKPfWntfjkvBNzN5O0vCf%2FYZsh53%2BM6sXXoeGbKxTCjozrEXmLmjbPQ75KJ1EHQ7Z9FHjCPD0BMXaqaLa3D%2Ftw%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20240519T085302Z&X-Amz-SignedHeaders=host&X-Amz-Expires=900&X-Amz-Credential=ASIA6FFT7S4B5POFWAUR%2F20240519%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=d92447283e3aee5c8369f8f4929b19385866dc85fce465b61903a876c5dc4ab1",
                "SMALL": "https://gb-prod-doc-source.s3.amazonaws.com/77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3/1714343049164-81272441b82c9b001b5dc02d4cc08291587c9fc374f03ac27a71773271311aea/PDF_SMALL?response-content-disposition=attachment%3B%20filename%2A%3DUTF-8%27%27SMALL&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQCUMeJacU%2FMa3ONPQr5cGHSxYgfisdbTCfvqdCSFIQTjQIhAMDGtj2wNRhSKF2bynLMO8r5qEd0CtRMYePa42r0GGw1KtUDCBIQABoMOTczMTg3NTUzMDI3Igx%2BNLBqvBicttm1%2F%2BIqsgPRPBl8WHj07L8cwomPgFSvwKvkMKkkGRoEvDLEf%2FOCYfVOAehgUUZXXq%2BgXeOrGS%2F%2Fi64iErJ5eyovacvq%2B%2B7xEef6%2FixOcXfhQGmCt1GnjuhKJPCKmKFu5JVias6RSgMO2ANUh08IQS9J67aZT0BcOID5wDy%2B9i09TQBVleRxvKZ%2BZ4ihsNIgGvvhBA33RsJfBlj5Ary3SuE%2Fhf2k8YzZuRcW9qVg27yrUCcWoKCJGFpU5oOqH0rzFYiqBfXPZwla3ZIL4Fi%2BVNn62uUGxRkDMZPkpx%2BRN14Rpdv8i2ttnIgZSEMDnOTYtl5sgRR8r7eViHVdzoTXoyccZxsnzrKC%2FFQRNQwvFwwHqOShTk8EZlMh1HOw7LHXz0Opua4kCaEZBAeICDDE1YzOApR2UWFbLJ6JtMPdWoFSo8oh4khOe4BqdMpq87%2FvSsGpxaefo%2BDcXi190bMnDx%2FvZo5hfuCxw%2B356PWCY16rd6tlAzKmAayTIXTPMT9GCkQtqM49SzBmj2aZcx6rn4T%2FHhu9BxUv%2BjMJWScRo4UstxbKslrSaT%2FUhIv899BnT486eRAi6uMgZzDz86ayBjqgAaSVq821v2pVjoIIWxyNJWlSl8odH1y8z9si0OvYdPi1c5Q6nexvFwiYFb13t23virhMO7tHdsNjzE2cxnQOj8Kf3f91q2l8a6Ijb%2Bj0hDspn8kSf3Q%2FdPsAyC9rn%2B7MVgKPfWntfjkvBNzN5O0vCf%2FYZsh53%2BM6sXXoeGbKxTCjozrEXmLmjbPQ75KJ1EHQ7Z9FHjCPD0BMXaqaLa3D%2Ftw%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20240519T085302Z&X-Amz-SignedHeaders=host&X-Amz-Expires=900&X-Amz-Credential=ASIA6FFT7S4B5POFWAUR%2F20240519%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=b3f7ebd3d65ad8fe74eec494bf5220e57715ba25aa27142d3e93f2d2ac255c79",
                "SMALL_HQ": "https://gb-prod-doc-source.s3.amazonaws.com/77c4bd695e891b73b67f8c6c11df9baa76b47a2f0fe837ef201f34f5de0fb3e3/1714343049164-81272441b82c9b001b5dc02d4cc08291587c9fc374f03ac27a71773271311aea/PDF_SMALL_HQ?response-content-disposition=attachment%3B%20filename%2A%3DUTF-8%27%27SMALL_HQ&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQCUMeJacU%2FMa3ONPQr5cGHSxYgfisdbTCfvqdCSFIQTjQIhAMDGtj2wNRhSKF2bynLMO8r5qEd0CtRMYePa42r0GGw1KtUDCBIQABoMOTczMTg3NTUzMDI3Igx%2BNLBqvBicttm1%2F%2BIqsgPRPBl8WHj07L8cwomPgFSvwKvkMKkkGRoEvDLEf%2FOCYfVOAehgUUZXXq%2BgXeOrGS%2F%2Fi64iErJ5eyovacvq%2B%2B7xEef6%2FixOcXfhQGmCt1GnjuhKJPCKmKFu5JVias6RSgMO2ANUh08IQS9J67aZT0BcOID5wDy%2B9i09TQBVleRxvKZ%2BZ4ihsNIgGvvhBA33RsJfBlj5Ary3SuE%2Fhf2k8YzZuRcW9qVg27yrUCcWoKCJGFpU5oOqH0rzFYiqBfXPZwla3ZIL4Fi%2BVNn62uUGxRkDMZPkpx%2BRN14Rpdv8i2ttnIgZSEMDnOTYtl5sgRR8r7eViHVdzoTXoyccZxsnzrKC%2FFQRNQwvFwwHqOShTk8EZlMh1HOw7LHXz0Opua4kCaEZBAeICDDE1YzOApR2UWFbLJ6JtMPdWoFSo8oh4khOe4BqdMpq87%2FvSsGpxaefo%2BDcXi190bMnDx%2FvZo5hfuCxw%2B356PWCY16rd6tlAzKmAayTIXTPMT9GCkQtqM49SzBmj2aZcx6rn4T%2FHhu9BxUv%2BjMJWScRo4UstxbKslrSaT%2FUhIv899BnT486eRAi6uMgZzDz86ayBjqgAaSVq821v2pVjoIIWxyNJWlSl8odH1y8z9si0OvYdPi1c5Q6nexvFwiYFb13t23virhMO7tHdsNjzE2cxnQOj8Kf3f91q2l8a6Ijb%2Bj0hDspn8kSf3Q%2FdPsAyC9rn%2B7MVgKPfWntfjkvBNzN5O0vCf%2FYZsh53%2BM6sXXoeGbKxTCjozrEXmLmjbPQ75KJ1EHQ7Z9FHjCPD0BMXaqaLa3D%2Ftw%3D&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20240519T085302Z&X-Amz-SignedHeaders=host&X-Amz-Expires=900&X-Amz-Credential=ASIA6FFT7S4B5POFWAUR%2F20240519%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=548fc0d1b43fd5137a5c59e28b91fe81edd0c04f410e3063d1be0011c2514923"
            }
        },
        "ResourceState": "RECYCLED"
    }
}

URLが入手できるので、wgetしてファイルを開いてみると次の画像が入手できました。

LEETっぽいのでlかIかわからないなと思いつつ、入力しましたが正解になりませんでした。

HTB{v4Ul7l0i_i5_L0vely_l5n'7_l7?}
HTB{v4UI7l0i_i5_L0vely_I5n'7_I7?}
HTB{v4Ul7I0i_i5_L0vely_I5n'7_I7?}
HTB{v4Ul7I0i_i5_L0vely_I5n'7_I7?} ★これが公式のWriteupでも正解となってたもの

改めてdescribe-activitiesの結果を眺めていると、flag.txtではあるもののdoc-idが異なるものがあることに気づきました。

$ aws workdocs get-document --document-id 5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303
{
    "Metadata": {
        "Id": "5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303",
        "CreatorId": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b",
        "ParentFolderId": "a640c404de3b5999c1d06cdf4eb6b7a29de60b26d1611cc8bc3757447dc49555",
        "CreatedTimestamp": "2024-05-18T12:15:36.962000-04:00",
        "ModifiedTimestamp": "2024-05-18T12:15:44.393000-04:00",
        "LatestVersionMetadata": {
            "Id": "1716048936962-62cd64e3c78ceac9b28d07615056620eb3c41ba49156b8f5979eac81eaa1f720",
            "Name": "flag.txt",
            "ContentType": "text/plain",
            "Size": 40,
            "Signature": "3a1339875f0d0486886f1f4da81171a0",
            "Status": "ACTIVE",
            "CreatedTimestamp": "2024-05-18T12:15:36.962000-04:00",
            "ModifiedTimestamp": "2024-05-18T12:15:36.962000-04:00",
            "CreatorId": "S-1-5-21-1692074632-1250882497-497425265-500&d-9067e0513b",
            "Thumbnail": {
                "LARGE": "https://gb-prod-doc-source.s3.amazonaws.com/5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303/1716048936962-62cd64e3c78ceac9b28d07615056620eb3c41ba49156b8f5979eac81eaa1f720/PDF_LARGE?response-content-disposition=attachment%3B%20filename%2A%3DUTF-8%27%27LARGE&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQCderu0vseAlQ%2Bxbx8iWzr3ebx7kfpN6u8VUg12OYs4kQIhANjExFWpPdLhbp%2FXQOMRLrG5VdLrAfcNSIFOAYLeCHpNKtMDCBIQABoMOTczMTg3NTUzMDI3Igz%2BK62jK8e7gkr047oqsANlL%2FKP0W4fLKRZadh9CK5u0BYJWVQwarmD2xj6ypqfsHTVuquxN8hog3nwt4pWvts3sxfG2n3rcYdye2vkNrPws4DGDTkt%2FDYAacilQL0rWROqw5pDSF3pTzCFHf06IcPz%2BTSAGc94zwlmJA0dtR%2Bbqz4bOwYKnaXfv4jBwe3KKShgmAT0IeBICKmAKkLZ0B%2FjRtQvcf7ee6jYqa%2Ff4zrqB9PxzJGXqMbnmoGmZ7ROHSE2dcexnOtw7%2F68rf34v1tc7I1UwuWMrYHHfTuEJAMszRDi73OixDyYP4tA9B%2B0Qpi0%2BKN4QdzgpzsS5nxDOXkwZ2YC%2BaDSmmmsgMI8AwBf9OaBDzpkbMQ7dbO5IP79%2FHKOl0KCy3nrHkfLY%2FCWxTmUiyrA5qmQkSc0ytOty0rdku5RCyEubXyUcSvxoICGvlm%2FOs6TyV7X8OWZ9AT4r3BNkmP4BZOH3lNRJxIbJiQIowEm%2FAr202akyfzefh%2BRm%2BGRGLj%2FChC%2BKKLnCYRk657xF38zSQldXp%2BfY%2BmKCPQaLpcV8KoW0HKRsS6klIwHSqFXNSwvlbjzYquAvm8vZHMwiPimsgY6oAF3BhHHvxwmZ6N6TSRN0Yq%2BhwYh1VRvyyW8llig81RWbJkVID4d42Zf5o8M9k20i927O8Fa4GKn9pcqLZSVgbC9Y%2Fvz9CESFzyZddxv6ZepIV7Dehjo7ESl5Xtm6Glj4NQznASPg%2B3iI2WP0HMyA%2FzCMuYTvaDUaOzgClR%2BQKYFEkIXcj4jCwtzsnpReHmfQW6aXuodPFH9RdjphijHjjvs&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20240519T093121Z&X-Amz-SignedHeaders=host&X-Amz-Expires=900&X-Amz-Credential=ASIA6FFT7S4BZ4TFMCI5%2F20240519%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=805b54d267ab2df286dd9888184ffaf71b60557e0f1b88e78c28ba3de5ad8652",
                "SMALL": "https://gb-prod-doc-source.s3.amazonaws.com/5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303/1716048936962-62cd64e3c78ceac9b28d07615056620eb3c41ba49156b8f5979eac81eaa1f720/PDF_SMALL?response-content-disposition=attachment%3B%20filename%2A%3DUTF-8%27%27SMALL&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQCderu0vseAlQ%2Bxbx8iWzr3ebx7kfpN6u8VUg12OYs4kQIhANjExFWpPdLhbp%2FXQOMRLrG5VdLrAfcNSIFOAYLeCHpNKtMDCBIQABoMOTczMTg3NTUzMDI3Igz%2BK62jK8e7gkr047oqsANlL%2FKP0W4fLKRZadh9CK5u0BYJWVQwarmD2xj6ypqfsHTVuquxN8hog3nwt4pWvts3sxfG2n3rcYdye2vkNrPws4DGDTkt%2FDYAacilQL0rWROqw5pDSF3pTzCFHf06IcPz%2BTSAGc94zwlmJA0dtR%2Bbqz4bOwYKnaXfv4jBwe3KKShgmAT0IeBICKmAKkLZ0B%2FjRtQvcf7ee6jYqa%2Ff4zrqB9PxzJGXqMbnmoGmZ7ROHSE2dcexnOtw7%2F68rf34v1tc7I1UwuWMrYHHfTuEJAMszRDi73OixDyYP4tA9B%2B0Qpi0%2BKN4QdzgpzsS5nxDOXkwZ2YC%2BaDSmmmsgMI8AwBf9OaBDzpkbMQ7dbO5IP79%2FHKOl0KCy3nrHkfLY%2FCWxTmUiyrA5qmQkSc0ytOty0rdku5RCyEubXyUcSvxoICGvlm%2FOs6TyV7X8OWZ9AT4r3BNkmP4BZOH3lNRJxIbJiQIowEm%2FAr202akyfzefh%2BRm%2BGRGLj%2FChC%2BKKLnCYRk657xF38zSQldXp%2BfY%2BmKCPQaLpcV8KoW0HKRsS6klIwHSqFXNSwvlbjzYquAvm8vZHMwiPimsgY6oAF3BhHHvxwmZ6N6TSRN0Yq%2BhwYh1VRvyyW8llig81RWbJkVID4d42Zf5o8M9k20i927O8Fa4GKn9pcqLZSVgbC9Y%2Fvz9CESFzyZddxv6ZepIV7Dehjo7ESl5Xtm6Glj4NQznASPg%2B3iI2WP0HMyA%2FzCMuYTvaDUaOzgClR%2BQKYFEkIXcj4jCwtzsnpReHmfQW6aXuodPFH9RdjphijHjjvs&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20240519T093121Z&X-Amz-SignedHeaders=host&X-Amz-Expires=900&X-Amz-Credential=ASIA6FFT7S4BZ4TFMCI5%2F20240519%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=44c9bab4aacc25089958a2d6f721cf931fa5be1cbf03e24eb19aff70db65e39a",
                "SMALL_HQ": "https://gb-prod-doc-source.s3.amazonaws.com/5347a27512a4f5a1c0ed4b7e965210deecbb6b806a23034ce799614ca32a8303/1716048936962-62cd64e3c78ceac9b28d07615056620eb3c41ba49156b8f5979eac81eaa1f720/PDF_SMALL_HQ?response-content-disposition=attachment%3B%20filename%2A%3DUTF-8%27%27SMALL_HQ&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEJn%2F%2F%2F%2F%2F%2F%2F%2F%2F%2FwEaCXVzLWVhc3QtMSJIMEYCIQCderu0vseAlQ%2Bxbx8iWzr3ebx7kfpN6u8VUg12OYs4kQIhANjExFWpPdLhbp%2FXQOMRLrG5VdLrAfcNSIFOAYLeCHpNKtMDCBIQABoMOTczMTg3NTUzMDI3Igz%2BK62jK8e7gkr047oqsANlL%2FKP0W4fLKRZadh9CK5u0BYJWVQwarmD2xj6ypqfsHTVuquxN8hog3nwt4pWvts3sxfG2n3rcYdye2vkNrPws4DGDTkt%2FDYAacilQL0rWROqw5pDSF3pTzCFHf06IcPz%2BTSAGc94zwlmJA0dtR%2Bbqz4bOwYKnaXfv4jBwe3KKShgmAT0IeBICKmAKkLZ0B%2FjRtQvcf7ee6jYqa%2Ff4zrqB9PxzJGXqMbnmoGmZ7ROHSE2dcexnOtw7%2F68rf34v1tc7I1UwuWMrYHHfTuEJAMszRDi73OixDyYP4tA9B%2B0Qpi0%2BKN4QdzgpzsS5nxDOXkwZ2YC%2BaDSmmmsgMI8AwBf9OaBDzpkbMQ7dbO5IP79%2FHKOl0KCy3nrHkfLY%2FCWxTmUiyrA5qmQkSc0ytOty0rdku5RCyEubXyUcSvxoICGvlm%2FOs6TyV7X8OWZ9AT4r3BNkmP4BZOH3lNRJxIbJiQIowEm%2FAr202akyfzefh%2BRm%2BGRGLj%2FChC%2BKKLnCYRk657xF38zSQldXp%2BfY%2BmKCPQaLpcV8KoW0HKRsS6klIwHSqFXNSwvlbjzYquAvm8vZHMwiPimsgY6oAF3BhHHvxwmZ6N6TSRN0Yq%2BhwYh1VRvyyW8llig81RWbJkVID4d42Zf5o8M9k20i927O8Fa4GKn9pcqLZSVgbC9Y%2Fvz9CESFzyZddxv6ZepIV7Dehjo7ESl5Xtm6Glj4NQznASPg%2B3iI2WP0HMyA%2FzCMuYTvaDUaOzgClR%2BQKYFEkIXcj4jCwtzsnpReHmfQW6aXuodPFH9RdjphijHjjvs&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Date=20240519T093121Z&X-Amz-SignedHeaders=host&X-Amz-Expires=900&X-Amz-Credential=ASIA6FFT7S4BZ4TFMCI5%2F20240519%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Signature=1860c2e9c4aaabf995daa4cd4cd1e1f71ed1f93b11e5a890eb6cd9fe63e00800"
            }
        },
        "ResourceState": "ACTIVE"
    }

一番下のResourceStateがACTIVEになっていました。

HTB{AWS_WORKDOCS_CAN_HAVE_USEFUL_STUFF}を送信したら正解した（記憶がある、あやふやなのでもしかしたらその前に送信していたやつで正解していた可能性もあるが）

おわり

別解ではないが、なんか違う感じだったので記録として残します。CTF自体はとても楽しかったですが、もっと取り組んでいかないと解けないよなという思いもありました。



以上の内容はhttps://kataware.hatenablog.jp/entry/2024/05/23/215640より取得しました。
このページはhttp://font.textar.tv/のウェブフォントを使用してます
不具合報告/要望等はこちらへお願いします。
モバイルやる夫Viewer Ver0.14