Robots are running secret service that aims to mill down diamonds into fairy dust, and use it to take over our world! Help us please! 23.22.1.14:1282 In this challenge we have a telnet interface to a nice chest that can store an item, remove an item or view the list […]
We found the source code for this robot encryption service, except the key was redacted from it. The service is currently running at 23.21.15.166:4433 #!/usr/bin/python import os import struct import SocketServer from Crypto.Cipher import AES ENCRYPT_KEY = ‘xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx’.decode(’hex’) # Character set: lowercase letters and underscore PROBLEM_KEY = ‘xxxxxxxxxxxxxxxxxxxxxxxxxxxxx’ BLOCK_SIZE = […]
Robots enjoy some strange games and we just can’t quite figure this one out. Maybe you will have better luck than us. 23.22.16.34:6969 We have a game running on that port: You have gotten 0 of 75 Choice 1 = 98d00c65d341be04600f915b32c01c81ab Choice 2 = 7a859a01731c050797ac952d82b895882a Which one is bigger? (1 […]
“It turns out that robots, like humans, are cheap and do not like paying for their movies and music. We were able to intercept some torrent downloads but are unsure what the file being downloaded was. Can you figure it out?” We get a pcap file with the P2P part […]
In this challenge we get a sound wave file named 80s. Listening to it will immediately bring back some memories if you are in your thirties: DTMF dialing, short modem handshake, data. The handshake is very short so I guestimated the speed to be 9600 bauds also the overall sound […]
The daemon on port 4004 is a fairly simple daemon that check for a password (hard-coded in the binary) and just says “You are authenticated”. What’s interesting is that this daemon is running on the same server that many other challenges so we used it to fetch files and solve […]
This challenge runs under the NDH VM written specially for this CTF by Jonathan Salwan. We are told to exploit a web server running at sciteek.nuitduhack.com:4005 to get a file named sciteek-private.txt. We get a copy of the web server software in the file Web3.ndh which is running in the […]
We have a binary $ file reverse_me.bin reverse_me.bin.back: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV), statically linked, corrupted section header size $ readelf -l reverse_me.bin Elf file type is EXEC (Executable file) Entry point 0x8048054 There are 1 program headers, starting at offset 52 Program Headers: Type Offset […]
In this challenge we 2 files: 1 PCAP, 1 Python The PCAP file contains a dialog between a client and server that goes like this: > = client to server < = server to client > 8e67bb26b358e2ed20fe552ed6fb832f397a507d:3daf723376f823eceeb314c8fa60e47b1ba23633 < 5f367ff47fff772986cca54219fa167175353dc7 > 78be5fe51f264a4067463bad57022348 < 3290452b9a9f6d18523347dd1daa54a1e09195a7 > 94817a6b1d833e1ffb4fcb2aa7dd14143dc5759e>_
$ ssh codeXing@1.234.41.2 Password: … FreeBSD 8.2-RELEASE (GENERIC) #0: Fri Feb 18 02:24:46 UTC 2011 $ ls -l -rwsr-xr-x 1 codeXing2 codeXing2 5916 Feb 24 08:49 X -r——– 1 codeXing2 codeXing2 26 Feb 24 08:56 password Looks like a classic binary exploitation challenge right ? $ echo “ABCDEFGHIJKLOMNOPQRSTUVWXYZ” > test […]