No Sequels Category: WebPoints: 50Description: The prequels sucked, and the sequels aren’t much better, but at least we always have the original trilogy. This one I found really interesting because I had never done nosql injection before. Anyway we are presented with a stock standard username password form and the source code of …
One Bite Category: RevPoints: 60Description: Whenever I have friends over, I love to brag about things that I can eat in a single bite. Can you give this program a tasty flag that fits the bill? I feel like i’m cheating when im using ghidra. Anyway this binary takes some input and then …
Category: RevPoints: 40Description: Now I like dollars, I like diamonds, I like ints, I like strings. Make Cardi like it please. So I went overkill on this challenge because I WANTED TO 🙂 HEE. Basically running the binary asks the question: Running strings on the binary you can see there is a weird …
Category: RevPoints: 10Description: Many of our problems will require you to run Linux executable files (ELFs). This problem will help you figure out how to do it on our shell server. Use your credentials to log in, then navigate to /problems/2019/intro_to_rev. Run the executable and follow its instructions to get a flag! Really …
Category: CryptoPoints: 50Description: Mm, coffee. Best served with half and half! I didn’t really like this challenge but, it was kinda cool. Anyway we are given the following code: This reads the flag from another file splits it in half and xor’s it with itself and given the result. Now since we are …
Category: CryptoPoints: 30Description: I found this flag somewhere when I was taking a walk, but it seems to have been encrypted with this Really Secure Algorithm! So for this challenge we are given the RSA values [p, q, e, c]. p, q and e is enough for us to create the private key …
Category: CryptoPoints: 20Description: Every CTF starts off with a Caesar cipher, but we’re more classy. So this challenges presents us with a python script with essentially a caeser cipher but a bit better So essentially it is reading the flag and shift amount from a file and shifts each characters hex value by …
Initial Foothold Starting with an NMAP reveals 7 ports open So an SSH port which is usually not that interesting, an FTP port which does not allow anonymous access, DNS through TCP which is interesting (think zone transfers and especially because of this boxes name). HTTP and HTTPS for a …
Welcome to Part 3 of the Natas write up where I cover Natas 11-15 the difficulty on these challenges definitely step it up to the previous ones, so let’s check it out. Natas 11 So we are presented with a screen that let’s us change the colour of the background, …
So continuing off where we left of straight away: Natas 5 Ok cool, so logging into natas 5 the site greets us with this message: Access disallowed. You are not logged in So my thought process was quite straight forward. How does a browser know if someone is logged in …