PwC Write up Cuba - Hid3 and S33k

Đề:
for onsite team, contact orgnaiser to copy,thanks.
https://drive.google.com/open?id=0B7ahcQCpMll-ZmRDZzJJWkRpSkk

Bài này cho ta 1 file raw tận 2G, khá là căng, mình tiến hành phân tích với volatility và đầu tiên là check imageinfo, nhưng k hiểu lí do gì mấy chạy ngoài k ra -_- bực mình thử xài STRINGS thần chưởng thì supprise madafuka

Nhận xét

Đăng nhận xét

Bài đăng phổ biến từ blog này

CSAW 2017 Write up

Hình ảnh
1. Misc 50 2. Forensic 150 3. Forensic 200 4. Crypto 350 5. Misc 100 ( twich ) 1.  nc misc.chal.csaw.io 4239 flag{@n_int3rface_betw33n_data_term1nal_3quipment_and_d@t@_circuit-term1nating_3quipment} In this challenge, when we connect to the server, it will give us 11 bits bin Okay, It is 8-1-1 even parity . It will look like 0        0.....0   0               0 start   data    parity bit   stop So now we check the data and the parity bit , if it right, we will get the data[-1] and send '1', or if it wrong, we will send '0' to make it retranmiss With parity bit, we can count the amount of  bit '1' in data , if the amount is even, the parity bit will be 0  okay now we write a script to do it and eat some snack, then we got the flag 2. Forensic 150:  It's registration day! These forms just seem longer and longer... UPDATE 10:44 Eastern...
Đọc thêm

SHACTF 2017 Write up for MISC Junior (200)

Hình ảnh
Crypt1:All about the base   V2VsbCBkb25lLAoKdGhpcyBmaWxlIGlzIGVuY3J5cHRlZCB3aXRoIEJhc2U2NC4gT2Z0ZW4gdXNl ZCBpbiBDVEYncyB0byBkaXNwbGF5IGJpbmFyeSBkYXRhIGluIGEgbW9yZSBmcmllbmRseSB3YXku IAoKVGhlIGZsYWcgZm9yIHRoaXMgY2hhbGxlbmdlIGlzIGZsYWd7YjNlOWMzZWVlNjA5YmFjNDZm YWQ0NDM5Y2YzMjFmZTV9Cg== just base64 decode -> flag Crypt 1: Rotation Seems someone rotated the alphabet, can you get the original message back? Ykksy eua ckxk ghrk zu mkz znk zkdz hgiq. Znk lrgm oy lrgm{30j3g1gg0ijg9l08ijlg52668hi6854g} Okay, must be caesar right? i took the part " lrgm{30j3g1gg0ijg9l08ijlg52668hi6854g}" Because i know for sure lrgm must be flag in some ROT    kt.pe is dead :v so i wrote a script to do the job :v    flag: flag{30d3a1aa0cda9f08cdfa52668bc6854a} Crypt2: Substitute Teacher Hello, my name is Mr. Smith, I will be your  substitute  teacher for today. I only have one assignment for you today, if you solve it you may go home. Now be silen...
Đọc thêm

SECT CTF - ACID BURN ft REPORT Misc 200 & 200 Write up

Hình ảnh
Report - Misc ( 200 + 0 ) Mr. Belford sucks, is he hiding something.... Download:  http://dl.ctf.rocks/Report.tar.gz We are given a PDF file, at first i though maybe they hide some image or hidden text inside the pdf, so i use this site to extract   But wow, the are neither image nor font ,  nothing but text and metadata, cool  :D  So i was googling to see if the anyway to hide data in PDF We know that hidden data can be embeded in  But in SHA2017 CTF, i have solved something encrypted with AES , to recover, we must know how the PDF Structure to get key, so i think maybe the data is embeded in the OBJ section like  and below is the hidden data that we need to find.  So I used binwalk to extract data in pdf file ( fore some reason i cant use any pdf tool in my ubuntu, still working on fixing lol ) , then check the obj section ( in .zlib ) as u can see, we know that the prefix "SECT" in hex are : 53 45 43 5...
Đọc thêm