Pwn:

HappyCard(difficulty:Schrödinger):

Pwn,difficulty:Schrödinger

Suppose we have a card and can load something on it.

nc 198.11.179.216 7788

[attachment](<https://rwctf-attachment.oss-accelerate.aliyuncs.com/happyCard_attachments_b94c29b6e6f1100a41fb4c6274c1b775.zip>)

happyCard.zip

ShellFind(difficulty:Normal):

Pwn,difficulty:Normal

Hello Hacker.
You don't know me, but I know you.
I want to play a game. Here's what happens if you lose.
The device you are watching is hooked into your Saturday and Sunday.
When the timer in the back goes off,
your curiosity will be permanently ripped open.
Think of it like a reverse bear trap.
Here, I'll show you.
~~There is only one service to shell the device.~~
There is only UDP one service to shell the device.
It's in the stomach of your cold firmware.
Look around Hacker. Know that I'm not lying.
Better hurry up.
Shell or out, make your choice.

nc 47.89.210.186 57798

[attachment](<https://rwctf-attachment.oss-accelerate.aliyuncs.com/firmware_5b2e8b00592e6d91d87a95c1d7b872e0.tar.gz>)

firmware.tar.gz

NonHeavyFTP(Clone-and-Pwn,difficulty:Baby):

Clone-and-Pwn, difficulty:Baby

A non-heavy FTP for you.

# primary
$ nc 47.89.253.219 2121

# backup
$ nc 47.89.253.219 2221

Note: bruteforceNOT required, please be gentle. Server will be restarted every 5 miniutes.

[attachment](<https://rwctf-attachment.oss-accelerate.aliyuncs.com/NonHeavyFTP.4cac4e27ac31f8ca7afcf64547c32006.zip>)

NonHeavyFTP.zip

Hardened Redis(Clone-and-Pwn, difficulty:Schrödinger):

Clone-and-Pwn, difficulty:Schrödinger

My Redis Server is now invincible and unassailable. It has been fortified to the highest degree, making it impervious to any attempts to breach its security. No one will be able to penetrate the server's defenses, making it truly indomitable.

nc 47.88.50.1 9999

[attachment](<https://rwctf-attachment.oss-accelerate.aliyuncs.com/Hardened_Redis_e0a549819e9aa8bbfee3b6dfd35050aa.tar.gz>)

Hardened_Redis.tar.gz

Printer2(Clone-and-Pwn,difficulty:Normal):