Collaborate Disseminate
I have been set on a mission by a friend to try and find a way to decrypt any/all of these strings:
4,2,c19db5de982f4595ae761bd9d998ce89,CHWK,19cd5ac9,19d6438f,1df,0,RvNWdl15V8MQv14/SgGwcpy1KIY=
4,2,3814b2e789a24b4f8135eff81a730a85,CHWK,1… Continue reading What’d be the best way to find out how to decrypt/un-encode parts of ciphertext? [closed]
Working on a CTF challenge and the coordinators hint suggests that one of the vectors to inject shellcode is via pathing. Looking at debugging prints does show the cwd and filename are passed onto the stack and a quick test shows creating … Continue reading Encoding shellcode to hide in filename / directory
(This is a question regarding a challenge in a wargame on overthewire.org called Narnia similar to Shellcode does not execute as the owner )
When exporting shellcode to EGG environment variable
export EGG=`python3 -c "import sys; sys…. Continue reading Exporting shellcode to environment variable doesn’t work as expected
Here is the elf summary of the program:
Arch: amd64-64-little
RELRO: Partial RELRO
Stack: No canary found
NX: NX enabled
PIE: No PIE (0x400000)
This is the main function of the disassembly of the p… Continue reading Trying to ret2text on 64bit program issues, can’t jump to shell
I started noticing this kind of token in a lot of CTF tasks from different authors:
eyJlbWFpbCI6ImVtYWlsQG1haWxib3guZG9tYWluIiwiaWQiOjN9.ZLNCAQ.MxwKVKj_dramWyfT5XxT6g9U3xk
The structure is as follows:
Payload (usually a json string). In m… Continue reading What type of token is this?
I am currently participating in a CTF Challenge and have reached a stage where I discovered a "log_admin" page. This page generates a cookie that is encrypted using AES 128 ECB. I obtained this information by retrieving the page’… Continue reading AES ECB cookie bypass
I have a problem running the CTF, despite it being based on Linux as demonstrated in the below image.
How do I run the CTF, and find the flag?
Continue reading I can’t run CTF challenge(ELF format) on linux to find the flag [closed]
public native boolean aaa(String str, AssetManager assetManager);
static {
System.loadLibrary("app");
}
/* access modifiers changed from: protected */
public void onCreate(Bundle savedInstanceState) {
super.onCreate(sav… Continue reading I have a CTF challenge for an Android app, How I extract the flag [closed]
I’m currently working on a cyber wargame using LFI to get an RCE. However, there are not many readable files such as log files and environ. What attack should I try to read the flag? In the case of flag, it exists as an executable file wit… Continue reading Lfi to rce in PHP [closed]
I came across a CTF that i’m trying to solve, the goal is fairly simple: Bypass the authentication form and access the admin-restricted area. You can find the code snippet below.
Things to consider:
The CTF is a simulation and a demonstra… Continue reading PHP CTF: Vulnerabilities in PHP before 2007?