This is a SPIP site. This version of SPIP stores database dump in /tmp/dump/[site name]_[date].xml Article 1 gives a huge hint about the correct date: http://54.247.160.116:8003/spip.php?article1 27 February 10:57, by Friendly-Boy – “Hii dude, did u remember to made a backup of ur site for the migration ?” 27 February […]
$ ls -la total 64 -rw-r–r– 1 francois francois 38120 Jun 30 01:29 crypto-1.jpg -rw-r–r– 1 francois francois 3226 Jun 13 20:50 zomb_crypt.pyc $ file * crypto-1.jpg: JPEG image data, JFIF standard 1.01 zomb_crypt.pyc: python 2.6 byte-compiled $ python Python 2.6.6 (r266:84292, Dec 27 2010, 00:02:40) [GCC 4.4.5] on linux2 […]
Simple RSA: $ cat john.pub —– BEGIN PUBLIC KEY —– KG4gPSAxNTQ5Mzg4MzAyOTk5NTE5LCBlID0gMTAxKQ== —– END PUBLIC KEY —– francois@squeeze:~/ndh2012/public/rsa$ echo -n "KG4gPSAxNTQ5Mzg4MzAyOTk5NTE5LCBlID0gMTAxKQ==" | base64 -d (n = 1549388302999519, e = 101) e = 101 n = 1549388302999519 Factorize n -> n = p * q -> 1549388302999519 = 31834349 * 48670331 $ […]
Simple crackme. After a bit of reversing in IDA: .text:08048F3C mov eax, [ebp+password] .text:08048F3F mov [esp+4], eax .text:08048F43 lea eax, […]
In this challenge we get a Windows XP memory dump and we are told to get the password inside a KeePassX file. KeePassX stores critical key encrypted in memory following a memory dump attack described here: http://systemoverlord.com/sites/default/files/projects/KeePassX.pdf But it’s still possible to dump keys with the current version. Please see Hugo […]