Mar 26
Our anonymous guy managed to get access to another
bunch of files. We also need to get
as much information as possible about the file itself. If you succeed, you will
be rewarded with $2500 for the ndh file.
executable2.ndh
NDH Virtual Machine
Summary: VM in the NDH VM, crackme
Feb 27
There are malicious program associated with DDoS zombie.
Calcurate the sum of port numbers used for the attack.
And, how many times does zombie try to attack?Answer: sum(attack_ports) * attack_count (* : multiplication)
Download : 72C4DAA981E17282B12E6226A1D60162
Summary: unpack, malware analyse
Feb 26
This file is Forensic file format which is generally used.
Check the information of imaged DISK, find the GUIDs of every partition.Answer: strupr((part1_GUID) XOR (part2_GUID) XOR …)
Download : B704361ACF90390C17F6103DF4811E2D
Forensic 500 features EWF format container with EFI GPT partition table.
Continue reading
Feb 26
1.234.41.7:22
ID : yesMan
PWD : ohyeah123
Download vulnerable binary.
Vuln500 was a hardened format-string vuln with ASLR, NX-stack, no-DTORs, RO .dynamic
Continue reading
Feb 26
Because of vulnerability of site in Company A, database which contains user’s information was leaked. The file is dumped packet at the moment of attacking.
Find the administrator’s account information which was leaked from the site.
For reference, some parts of the packet was blind to XXXX.Answer : strupr(md5(database_name|table_name|decode(password_of_admin)))
(‘|’is just a character)Download : 80924D4296FCBE81EA5F09CF60542AE7
Net400 featured a network packet capture of a blind SQL injection attack with task to extract some info and bruteforce a bit.
Continue reading
Feb 26
Here we are given ssh credentials where we need to exploit the binary.
Summary: compose file to make program jump to stack.
Feb 26
This web challenge is again about uploading.
Our aim was to get shell.
Summary: upload php shell, read the key.
Feb 26
This challenge is a web service where one can upload mp3 files and listen to them.
Our aim is to get admin’s song.
Summary: sql injection
Feb 26
Find a printable string that the program would print ultimately.
Down (pw: infected)
Summary: unpack, XTEA decrypt
Feb 13
this is one of their machines which have very sensitive informations ,
try to get for us the password208.64.122.27
PORT : 3000
X99 carries a synthetic vulnerability that allows a char-by-char password bruteforce.
Continue reading
