Variation on the theme of 0ctf's eeemoji. This challenge is running on Ubuntu 18.04. nc noemoji.hackable.software 1337 Unfortunately, we didn’t have the time to play this really awesome CTF but I got some time to have a look at the PWN challenges at the beginning of the CTF and this Read more…
description : Split this shit http://web2.ctf.nullcon.net:8081/ Initial steps When we first opened the website, we were presented with a static page that shows a GIF but on viewing the source code there was an ajax request being sent var xhttp = new XMLHttpRequest(); xhttp.onreadystatechange = function() { if (this.readyState == Read more…
Our company has been victim of a Ransomeware that damaged our "Secure share" website. Access to "Secure share" has been partially restored and traces of the malware have been deposited on it. Can you help us retrieve our files? http://defiltrate.insomnihack.ch/ So as the description shows, our target is to retrieve Read more…
Your favorite shellcode testing service, now in the cloud! nc 46.101.173.184 1446 The challenge only provides us with a non-stripped 64-bit binary. Running it gives us a menu with a couple of options as shown: Checking the binary’s security flags Reversing Firing up IDA, we find out a couple of Read more…
I read the challenge name, I act like its nothing, I download the challenge, use strings on it to make sure, please don’t be it, find that it is what I think it is, its a Go binary. shoots self I have been struggling with Go compiled binary challenges for Read more…
Challenge: After I went bankrupt running my cookie store i decided to improve my security and start a pickle store. Turns out pickles are way more profitable! http://13.48.133.116:50000 By visiting the url we get the shop page By clicking buy to examine the request, we’ve found a base64 encoded cookie: Read more…
At the first glance it looked like an easy challenge, we had the following image and the description stated that only one bit was flipped. So all we have to do to get the flag was to flip that bit again. Easy, huh? Well, no. Downloading the image we find Read more…
Initials In that challenge we got a .vhd file (Virtual Hard Disk) Running file on the file we got that result of file command on the vhd file So it’s a NTFS corrupted image so let’s try to mount it and fix it with chkdsk So let’s check the files Read more…
Approaching the challenge we only get a simple description: nc 167.172.124.190 9002 Starting up by fuzzing the server with variable lengths of input, we always got the Bad Flag response but with varying time frames based on the input length then it wasn’t long until we realized that our input Read more…