Paweł Łukasik pawlos

## untrusted-lvl4-solution.js
/*******************
 * multiplicity.js *
 *******************
 *
 * Out of one cell and into another. They're not giving you
 * very much to work with here, either. Ah, well.
 *
 * Level filenames can be hints, by the way. Have I
 * mentioned that before?
 *

## untrusted-lvl5-solution.js
/******************
 * minesweeper.js *
 ******************
 *
 * So much for Asimov's Laws. They're actually trying to kill
 * you now. Not to be alarmist, but the floor is littered
 * with mines. Rushing for the exit blindly may be unwise.
 * I need you alive, after all.
 *
 * If only there was some way you could track the positions

## untrusted-lvl3-solution.js
/************************
 * validationEngaged.js *
 ************************
 *
 * They're really on to us now! The validateLevel function
 * has been activated to enforce constraints on what you can
 * do. In this case, you're not allowed to remove any blocks.
 *
 * They're doing all they can to keep you here. But you
 * can still outsmart them.

## untrusted-lvl2-solution.js
/********************
 * theLongWayOut.js *
 ********************
 *
 * Well, it looks like they're on to us. The path isn't as
 * clear as I thought it'd be. But no matter - four clever
 * characters should be enough to erase all their tricks.
 */

function startLevel(map) {

## untrusted-lvl6-solution.js

/****************
 * drones101.js *
 ****************
 *
 * Do you remember, my dear Professor, a certain introductory
 * computational rationality class you taught long ago? Assignment
 * #2, behavior functions of autonomous agents? I remember that one
 * fondly - but attack drones are so much easier to reason about
 * when they're not staring you in the face, I would imagine!

## untrusted-lvl7-solution.js
/*************
* colors.js *
 *************
 *
 * You're almost at the exit. You just need to get past this
 * color lock.
 *
 * Changing your environment is no longer enough. You must
 * learn to change yourself. I've sent you a little something
 * that should help with that.

## feuerfuchs.html
<!-- 33c3ctf feuerfuchs exploit -->
<script>
var buffer;
var ua;
var vuln;
var ay = new Array(0x800);
var magic = 0x51535759;
var magic1 = 0x71737779;

function gc() {

## spectre.c
#include <stdio.h>
#include <stdlib.h>
#include <stdint.h>
#ifdef _MSC_VER
#include <intrin.h> /* for rdtscp and clflush */
#pragma optimize("gt",on)
#else
#include <x86intrin.h> /* for rdtscp and clflush */
#endif

## post_install.sh
#!/bin/bash

if [[ $EUID -ne 0 ]]; then
   	echo "This script must be run as root"
   	exit 1
fi

user=$(who | awk '{print $1}')
#Update and Upgrade
echo "Updating and Upgrading"

## WADParser.py
#!/usr/bin/env python3

import struct
import re

class Wad(object):
    """Encapsulates the data found inside a WAD file"""

    def __init__(self, wadFile):
        """Each WAD files contains definitions for global attributes as well as map level attributes"""
	/*******************
	* multiplicity.js *
	*******************
	*
	* Out of one cell and into another. They're not giving you
	* very much to work with here, either. Ah, well.
	*
	* Level filenames can be hints, by the way. Have I
	* mentioned that before?
	*
	/******************
	* minesweeper.js *
	******************
	*
	* So much for Asimov's Laws. They're actually trying to kill
	* you now. Not to be alarmist, but the floor is littered
	* with mines. Rushing for the exit blindly may be unwise.
	* I need you alive, after all.
	*
	* If only there was some way you could track the positions
	/************************
	* validationEngaged.js *
	************************
	*
	* They're really on to us now! The validateLevel function
	* has been activated to enforce constraints on what you can
	* do. In this case, you're not allowed to remove any blocks.
	*
	* They're doing all they can to keep you here. But you
	* can still outsmart them.
	/********************
	* theLongWayOut.js *
	********************
	*
	* Well, it looks like they're on to us. The path isn't as
	* clear as I thought it'd be. But no matter - four clever
	* characters should be enough to erase all their tricks.
	*/

	function startLevel(map) {

	/****************
	* drones101.js *
	****************
	*
	* Do you remember, my dear Professor, a certain introductory
	* computational rationality class you taught long ago? Assignment
	* #2, behavior functions of autonomous agents? I remember that one
	* fondly - but attack drones are so much easier to reason about
	* when they're not staring you in the face, I would imagine!
	/*************
	* colors.js *
	*************
	*
	* You're almost at the exit. You just need to get past this
	* color lock.
	*
	* Changing your environment is no longer enough. You must
	* learn to change yourself. I've sent you a little something
	* that should help with that.
	<!-- 33c3ctf feuerfuchs exploit -->
	<script>
	var buffer;
	var ua;
	var vuln;
	var ay = new Array(0x800);
	var magic = 0x51535759;
	var magic1 = 0x71737779;

	function gc() {
	#include <stdio.h>
	#include <stdlib.h>
	#include <stdint.h>
	#ifdef _MSC_VER
	#include <intrin.h> /* for rdtscp and clflush */
	#pragma optimize("gt",on)
	#else
	#include <x86intrin.h> /* for rdtscp and clflush */
	#endif
	#!/bin/bash

	if [[ $EUID -ne 0 ]]; then
	echo "This script must be run as root"
	exit 1
	fi

	user=$(who \| awk '{print $1}')
	#Update and Upgrade
	echo "Updating and Upgrading"
	#!/usr/bin/env python3

	import struct
	import re

	class Wad(object):
	"""Encapsulates the data found inside a WAD file"""

	def __init__(self, wadFile):
	"""Each WAD files contains definitions for global attributes as well as map level attributes"""