Mathieu Rousse m-rousse

## rev1.writeup.asm
[0x00400560]> aaa
[0x00400560]> iz
vaddr=0x00400744 paddr=0x00000744 ordinal=000 sz=28 len=27 section=.rodata type=a string=What is the magic password?
vaddr=0x00400763 paddr=0x00000763 ordinal=001 sz=26 len=25 section=.rodata type=a string=Correct! Your flag is: %s

[0x00400560]> pd 10 @ 0x00400744-5
|          0x0040073f    0001           add byte [rcx], al
|          ;-- sym._IO_stdin_used:
|          ;-- section..rodata:
|          0x00400740    0100           add dword [rax], eax           ; [14] va=0x00400740 pa=0x00000740 sz=61 vsz=61 rwx=-r-- .rodata

## GenerateHostFile.py
#!/usr/bin/python3
from urllib.request import Request, urlopen
global confFile, sinkZone

urls = [
  "https://adaway.org/hosts.txt",
  "https://hosts-file.net/ad_servers.txt",
  "https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext"
]

## filter.py
#!/usr/bin/python3
# -*- coding: utf-8 -*-
import email
import email.encoders
import sys
from bs4 import BeautifulSoup
import re
import requests

mail = sys.stdin.read()

## docker-ddns.py
#!/usr/bin/python3

import docker
import pprint
import json
import signal
import sys
import dns.query
import dns.tsigkeyring
import dns.update

## index.html
<!doctype html>
<html ng-app="testModule">
  <head></head>
  <body ng-controller="MainController as vm">
    <button ng-click="vm.onNgClick()"></button>
    <ui-view></ui-view>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.6.1/angular.min.js"></script>
    <script src="https://cdnjs.cloudflare.com/ajax/libs/angular-ui-router/0.3.2/angular-ui-router.min.js"></script>
    <script>
angular

## main.js
const CDP = require('chrome-remote-interface');


async function wait(duration) {
  process.stdout.write('Waiting ' + duration + ' ms ')
  await new Promise(resolve => setTimeout(resolve, duration))
  console.log('- done!')
}

## badge.php
<?php
include("hid-table.php");

$keys = file_get_contents("keycodes.txt");
$keys = explode("\n", $keys);
array_pop($keys);

foreach($keys as $k){
	$dec = hexdec($k);
	$clear = $dec ^ hexdec("4E");
	[0x00400560]> aaa
	[0x00400560]> iz
	vaddr=0x00400744 paddr=0x00000744 ordinal=000 sz=28 len=27 section=.rodata type=a string=What is the magic password?
	vaddr=0x00400763 paddr=0x00000763 ordinal=001 sz=26 len=25 section=.rodata type=a string=Correct! Your flag is: %s

	[0x00400560]> pd 10 @ 0x00400744-5
	\| 0x0040073f 0001 add byte [rcx], al
	\| ;-- sym._IO_stdin_used:
	\| ;-- section..rodata:
	\| 0x00400740 0100 add dword [rax], eax ; [14] va=0x00400740 pa=0x00000740 sz=61 vsz=61 rwx=-r-- .rodata
	#!/usr/bin/python3
	from urllib.request import Request, urlopen
	global confFile, sinkZone

	urls = [
	"https://adaway.org/hosts.txt",
	"https://hosts-file.net/ad_servers.txt",
	"https://pgl.yoyo.org/adservers/serverlist.php?hostformat=hosts&showintro=0&mimetype=plaintext"
	]
	#!/usr/bin/python3
	# -- coding: utf-8 --
	import email
	import email.encoders
	import sys
	from bs4 import BeautifulSoup
	import re
	import requests

	mail = sys.stdin.read()
	#!/usr/bin/python3

	import docker
	import pprint
	import json
	import signal
	import sys
	import dns.query
	import dns.tsigkeyring
	import dns.update
	<!doctype html>
	<html ng-app="testModule">
	<head></head>
	<body ng-controller="MainController as vm">
	<button ng-click="vm.onNgClick()"></button>
	<ui-view></ui-view>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/angular.js/1.6.1/angular.min.js"></script>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/angular-ui-router/0.3.2/angular-ui-router.min.js"></script>
	<script>
	angular
	const CDP = require('chrome-remote-interface');


	async function wait(duration) {
	process.stdout.write('Waiting ' + duration + ' ms ')
	await new Promise(resolve => setTimeout(resolve, duration))
	console.log('- done!')
	}
	<?php
	include("hid-table.php");

	$keys = file_get_contents("keycodes.txt");
	$keys = explode("\n", $keys);
	array_pop($keys);

	foreach($keys as $k){
	$dec = hexdec($k);
	$clear = $dec ^ hexdec("4E");