Python
plaidCTF 2014 - reeekeeeeee (web200)
For PlaidCTF2014, Eindbazen and
fail0verflow joined forces as 0xffa, the
Final Fail Alliance. Don't miss out on other write-ups at
Eindbazen's site!
reeekeeeeee
Web (200 pts)
-------------
The Plague seems obsessed with internet memes, though we don't
yet know why. Perhaps there is a clue to what he's up to on this
server (epilepsy warning). If only you could break in....
Here is some of the source.
plaidCTF 2014 - wheeeee (crypto375)
For PlaidCTF2014, Eindbazen and
fail0verflow joined forces as 0xffa, the
Final Fail Alliance. Don't miss out on other write-ups at
Eindbazen's site!
wheeeee
Crypto (375 pts)
----------------
Although it seems like The Plague's messaging service is secure,
there are bound to be bugs in any 20th century crypto system.
We've recovered a version of the block cipher The Plague implemented.
Use their online encryptor tool, at 54.82.75.29:8193, to break the
cipher and figure out Plague's secret plans. NOTE: When the service
sends you a hex-encoded string, respond with a hex-encoded string.
plaidCTF 2014 - ezhp (pwn200)
For PlaidCTF2014, Eindbazen and
fail0verflow joined forces as 0xffa, the
Final Fail Alliance.
Don't miss out on other write-ups at Eindbazen's site!
Don't miss out on other write-ups at Eindbazen's site!
ezhp
Pwnables (200 pts)
-------------------
Luckily when you travel back in time, you still get to use all your
knowledge from the present. With that knowledge in hand, breaking
into this service (at 54.81.149.239:9174) owned by The Plague
shouldn't be hard at all.
To set the picture, let’s identify the binary
izsh@box:~$ file ezhp
ezhp: ELF 32-bit LSB executable, Intel 80386, version 1 (SYSV),
dynamically linked (uses shared libs), for GNU/Linux 2.6.24,
BuildID[sha1]=0x5fa5bd76db306497b549ea3b0466cd9e9afa2705, stripped
izsh@box:~$ readelf -l ezhp | grep STACK
GNU_STACK 0x000000 0x00000000 0x00000000 0x00000 0x00000 RWE 0x4
plaidCTF 2014 - __nightmares__ (pwn375)
For PlaidCTF2014, Eindbazen and
fail0verflow joined forces as 0xffa, the
Final Fail Alliance.
Don't miss out on other write-ups at Eindbazen's site!
Don't miss out on other write-ups at Eindbazen's site!
__nightmares__
Pwning (375 pts)
-------------------
The Plague is building an army of evil hackers, and they are starting
off by teaching them python with this simple service. Maybe if you
could get full access to this system, at 54.196.37.47:9990, you would
be able to find out more about The Plague's evil plans.
This server simply evaluates any Python expression provided - with an attempt at sandboxing it.