Blog


Challenge

Challenge was available at https://drive.google.com/open?id=17DOV0-3_TH3YPbMRSXpxugiHvHeTDQnn (password: wctf2018, SHA1 HASH: 7efe988b1f9fe283e4f3d9bd073d1a97a93f51ee).

Readme:

Description:
Encrypted message for user "admin":

<<<320881698662242726122152659576060496538921409976895582875089953705144841691963343665651276480485795667557825130432466455684921314043200553005547236066163215094843668681362420498455007509549517213285453773102481574390864574950259479765662844102553652977000035769295606566722752949297781646289262341623549414376262470908749643200171565760656987980763971637167709961003784180963669498213369651680678149962512216448400681654410536708661206594836597126012192813519797526082082969616915806299114666037943718435644796668877715954887614703727461595073689441920573791980162741306838415524808171520369350830683150672985523901>>>

admin public key:

n = 483901264006946269405283937218262944021205510033824140430120406965422208942781742610300462772237450489835092525764447026827915305166372385721345243437217652055280011968958645513779764522873874876168998429546523181404652757474147967518856439439314619402447703345139460317764743055227009595477949315591334102623664616616842043021518775210997349987012692811620258928276654394316710846752732008480088149395145019159397592415637014390713798032125010969597335893399022114906679996982147566245244212524824346645297637425927685406944205604775116409108280942928854694743108774892001745535921521172975113294131711065606768927
e = 65537

Service: http://36.110.234.253

Read full post

Challenge

Organize those rectangular things that take physical space!

https://books.web.ctfcompetition.com/

https://storage.googleapis.com/gctf-2018-attachments/21f658d0ceb5dedbf58549a8912676d95c426eb10c708c141f578a897d24eddc

A website is given along with its source where you can create an account and add books with some metadata.

Read full post

Challenge (46 solves, 210 points)

You discover this cat enthusiast chat app, but the annoying thing about it is that you’re always banned when you start talking about dogs. Maybe if you would somehow get to know the admin’s password, you could fix that.
https://cat-chat.web.ctfcompetition.com/

We are given a chat website. When entering it we are redirected to a random room and are greeted by a message.

Read full post

Challenge (74 solves, 158 points)

This crypto experiment will help you decrypt an RSA encrypted message.
(Attachment containing challenge.py, flag.txt, key_pub.pem)
nc perfect-secrecy.ctfcompetition.com 1337

Looking at the description and the given files we can guess, that flag.txt is the flag encrypted with RSA under key_pub.pem, which turns out to be correct. Furthermore we can guess that challenge.py is running on the server, which is also correct.

It seems our goal is to use the server to decrypt the flag for us.

Read full post

Challenge: “Win the game 1,000,000 times to get the flag.”

To get things started, I ran the apk in Anbox. We are greeted by a Tic-Tac-Toe implementation. Now from the challenge we know that we have to win the game 1 million times to get the flag. Being an avid gamer, I took this challenge and just went on a 1 million games winning streak, thanks for reading this Write-Up.

Jokes aside, this would not be a challenge, as the used AI seems to play really random, so we basically win after 3 turns anyway. So lets get us a real challenge.

Read full post

Challenge

We receive the following info:

Building the future web, together. 

http://amp.2018.teamrois.cn

After loading the page we are presented with:

Read full post

Challenge

We were given a binary smcauth together with a verilog file smcauth_syn.v and a server address. It can act as server:

./smcauth verify --secret aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa --netlist smcauth_syn.v [--listen ip:port]

and client:

./smcauth auth --secret aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa --netlist smcauth_syn.v [--verifier ip:port]

The client tells us whether the secret was "correct", or rather whether the circuit specified by --netlist evaluates to true, taking the client's and server's secret as input.

May 14 13:31:42.775 INFO authentication successful

May 14 13:31:57.274 WARN authentication failed

At this point, it is pretty obvious that we need to obtain the server's secret.

Read full post

First a disclaimer, we did not actually solve this challenge during the competition, but the servers were left running…

A server is provided: nc 37.139.22.174 22555

It greets us with the following text:

|-------------------------------------|
| Welcome to the Yunnyit crypto task! |
|-------------------------------------|
| Options:                            |
| [M]ixed encryption function of FLAG |
| [D]ecrypting cipher                 |
| [E]ncryption & decryption function  |
| [F]LAG encrypting...                |
| [Q]uit                              |
|-------------------------------------|
Submit a printable string X, such that sha256(X)[-6:] = 92730d

Read full post