kawing-ho

#!/bin/bash

# sleep time between box spawn
#SLEEP=1  					 #debug lol
SLEEP=60

# spawn 100 instances, 10 in each region
for region in nyc1 nyc3 ams3 sfo3 sgp1 lon1 fra1 tor1 blr1 syd1
	do
		echo "" && echo "[Spawning 10 boxes in $region]" && echo ""

kawing-ho

{"keys":[{"e":"AQAB","kid":"jwt_tool","kty":"RSA","n":"kAxsJGZwBGq2i6nOw1bCIrg7JfGQch4InP4FyFJFexEvc5LeiPB5jRk0YEanlnoNdKdsqMdg2hMGOUBKOCYycWdwd3pXUDB-qTV7v2qzO586QA3F4G912ieLfD_2jdl9PGAl7RwK9YemQTly-x4d3eC4Qh7MzdSWl3VrNQ-WFWbkYGg2oIzACLPTX_-Ko9zdzDT3WhD_Zpub5q1jpwRw72KnHdQmLNS5M-12-Yz1VEhylcGCOu6MO2bYKco233SyGu9-g2Wkr-zDut6RA4UEVfwd70x316c85xxd2f4WLun_wW01akWf051kePX7uZq9VoF5WoXK4CSF7ZqoARebiQ","use":"sig"}]}

kawing-ho

///bin///wcm///search///gql.json?query=type:base%20limit:..1&pathPrefix=
/security/.5..json?debug=layout
/online/.-1..json
/bin/querybuilder.json.css?path=/home/&p.limit=8
/bin/querybuilder.json?path=/libs/ 
/bin/querybuilder.json?path=/content 
/bin/querybuilder.json?path=/content/test/test/en_nz/security/ 
/bin/querybuilder.json?path=/crx/&p.hits=full&p.limit=50 
/bin/querybuilder.json?path=/home&p.hits=full&p.limit=-1 
/bin/querybuilder.json?fulltext=admin&p.limit=30 

kawing-ho

/wps/portal
/elmah.axd
/test/php/test.html
/phpmyadmin/setup/

kawing-ho

#!/usr/bin/env python3

# some libraries that you might need to pip install
from twilio.rest import Client 
from requests import get as reget

from os import environ as env
from os import path
from sys import exit as sysexit
from sys import stdin

kawing-ho

donttouchme
miko
murphy
mayansmoke  (similar to Tomorrow)
messy
madeofcode
getafe
cherryblosssom (json)
lakers_away
vice

kawing-ho

kawing-ho

Summary / TL;DR

I played in picoCTF again this year, and I think I performed a lot better than I did last year, especially in web, I wanted to share this writeup because I think I did a good job being the 75th person (out of like 5000 other players) to solve the final part of this series of web challenges.

1. Flaskcards (350 pts)
2. Flaskcards Skeleton Key (600 pts)
3. Flaskcards and Freedom [Highest point web challenge] (900 points)

Flaskcards

kawing-ho

#!/usr/bin/php
<?php          /* install php and php-curl */
    if($argc != 2) {
        fwrite(STDERR, "Usage: ".$argv[0]." <path to image>\n");
        die();
    }

    $image = $argv[1];
    if(! file_exists($image)) { fwrite(STDERR, "Not an image!\n"); die(); } 

kawing-ho

#!/usr/bin/python

from os import getpid
from re import search
from time import sleep
from random import randint
from selenium import webdriver
from pyvirtualdisplay import Display
from selenium.webdriver.common.by import By 
from selenium.webdriver.common.keys import Keys