capture the flag Archives

Wargames.my 2020 write-up: misc – defuse the bomb

In capture the flag, wargames.my By aimand On December 6, 2020December 8, 2020

First, list the content of the zip file $ unzip -vl bomb.zip Notice that one of the CRC32 value is different. We need to extract that single file. $ unzip bomb.zip 7.zip Next, repeat the…

Wargames.my 2020 write-up: cryptography (all)

In capture the flag, cryptography, wargames.my By aimand On December 6, 2020December 8, 2020

1. Babyrsa Unfortunately, I don’t know how the math in this challenge works. I used RsaCtfTool to solve this challenge python RsaCtfTool.py -n 22306351450360835278685008577095637579379519735569993605372382025943065943172195653447501298828968514687284277198607097065634258314264314927371277442275519637994628244973451713428529246432421492448316055762649494875064883616150678248746788780631659395141126436598713108296958809877050508719429858288542409206141714853617337747692468415137300472541599402472407915882162354129011035959781898989018189851240885134793158675541708464792531211982651421335486888814185904694334748742140907479724360382947060649121854484350812707303750753924042963642230136006371631037322400368914718351407008699556959068979201259584736419897 -e 65537 –uncipher 17602993744775645244932047693736399644507438713421090470524415766527158933476062715547401853988887892859852712288174327133373629909097820395435401533676533608936213580668532621040243037931761022394679651927262885744960614529599325651735809067636612587147031269202667870888506169666258327004309669721112194725267847462929621419423182917279393538900064854853776147192666718145232846523208281394755265917943312113266402772744899076664734081819237068101883336427745375537437389752990601021671228882409327526733171270971339644452600369079961452292583316600829728068432427992039322905022470729764699358872105298576585603770 2. Long Crypto Guessing This challenge uses…

Wargames.my 2020 write-up: Forensics (all)

In capture the flag, wargames.my By aimand On December 6, 2020December 8, 2020

1. Introduction After downloading lordkiske-server.ova, use the sha256sum command to get the hash. The flag: wgmy{the_sha256_hash} To make the following steps easier, I decided to extract the lordkiske-server.ova and mount the VMDK image inside it…

Wargames.my 2020 write-up: Web- Jika Kau Fikirkan Kau Boleh

In capture the flag, wargames.my By aimand On December 6, 2020March 24, 2023

Being the first person to solve this challenge, I was quite proud of myself. This challenge was rather simple, things you will need: a basic understanding of redis-cli a PHP shell that can execute system…