michaelpetrov

Stripe CTF - Work Notes
mpetrov (petrov.michael@gmail.com)

These notes are very rough. They should give a general idea of how each level was solved.

---- LEVEL 01 (login: e9gx26YEb2) -----
Solution: modifying PATH env variable
Password: kxlVXUvzv

date.c

michaelpetrov

//
//  Created by Michael Petrov on 12-02-23.
//  Copyright (c) 2012 TenthBit Inc. All rights reserved.
//  http://michaelpetrov.com (petrov.michael@gmail.com)
//
//
//  This solution performs a timing attack on the fork system call. By monitoring the process closely
//  it is possible to discover where the fork likely happened. With some basic heuristics, it's possible
//  to infer where the wrong character is. With very minor brute force searching it becomes very easy
//  to find the password one letter at a time.