Category: Writeups

CodeGate 2012 Quals – Binary 200

Find a printable string that the program would print ultimately. Down (pw: infected) Summary: unpack, XTEA decrypt

Continue reading

IFSF CTF #7 (X99) Write-up

this is one of their machines which have very sensitive informations , try to get for us the password 208.64.122.27 PORT : 3000 X99 carries a synthetic vulnerability that allows a char-by-char password bruteforce.

Continue reading

IFSF CTF Small Challenges (#4, #5, #6, #14, #15)

Contents #4 ER #5 Change #6 Call me #14 Seek me #15 Embedded docs

Continue reading

IFSF CTF #8 (X98) Write-up

we know it’s about some secret agents , but we need more than that 208.64.122.234 PORT 3000 X98 is a remote CTB task with a shell injection vuln.

Continue reading

IFSF CTF 2012 #9 – X97

SSH : 208.64.122.235 guest:guest binary Category: exploitation Summary: format string bug, ASLR and NX

Continue reading

Gits 2012 #13

File was running at kimjongun.final2012.ghostintheshellcode.com : 2645 Summary: buffer overflow, reverse

Continue reading

Gits 2012 #12

File was running at gratis.final2012.ghostintheshellcode.com:3030 Summary: reverse, x64, filtering parameters error

Continue reading

Gits 2012 # – Crypto 400

files running at hellothere.final2012.ghostintheshellcode.com Summary: MITM attack

Continue reading

Gits 2012 #14 Pwnable (300)

Jacked file running at jacked.final2012.ghostintheshellcode.com:2121 Summary: weak random, BlackJack bot, format string

Continue reading

Gits 2012 #7 – Reversing (300)

Question: Fanatic 300 Points Remeber the past. (Link) Here we have a NES emulator written on javascript. ROM can easily be dumped from there.

Continue reading

Gits 2012 #5 – Forensics (400)

Question: VoxVeritas 400 Points Find the secret passage. (File)

Continue reading

Gits 2012 #11 Packet (300)

Question: Noughts and crosses 300 Points Solve the puzzle! tictactoe.final2012.ghostintheshellcode.com:9797

Continue reading

Gits 2012 #19 – Crypto 250

Question: SuperSecure 250 Points Use your team name and generate a valid answer. (File) Summary: xor-chained sha256 and sha512

Continue reading

MozillaCTF 2012 AwesomeCorp. Secured Ranges (300) Writeup

One evening, you decide to take a look at the website of Awesome Corp., a competitor which you suspect of reverse-engineering parts of your software and using these code pieces in their own product. Unfortunately, you got no proof, so you begin to investigate on your own. Soon enough (insert random webhacking stuff here), you …

Continue reading

MozillaCTF 2012 SecureFileLock (250) Writeup

This very secure locking mechanism encloses files and only gives them to you when you know the passphrase. Find it and you will have the flag. Category: reversing Summary: find out a xor cipher, use xortool to get the key

Continue reading