michaelpetrov

Stripe CTF - Work Notes
mpetrov (petrov.michael@gmail.com)

These notes are very rough. They should give a general idea of how each level was solved.

---- LEVEL 01 (login: e9gx26YEb2) -----
Solution: modifying PATH env variable
Password: kxlVXUvzv

date.c

idanw

Stripe CTF Solutions
Author: Idan Warsawski

Here's a small description of how I did each level:

Level 01:
system("date");
Realias date to another pogram that will run "cat /home/level02/.password"
I used a simple shell script:

dutc

Linux可執行文件ㄉ內容分析工具

NOTE: This is a working copy. This tutorial is unfinished and may contain inaccuracies.

I've written the title of this tutorial in Chinese, as I suspect that its contents may, at first glance, appear similarly incomprehensible to the audience.

However, just as I can sketch for you the following...

可執行文件 = (可 = can) + (執行 = execute) + (文件 = file) = executable (file)

dutc

#include <stdio.h>
#include <stdlib.h>
#include <fcntl.h>
#include <unistd.h>
#include <string.h>

#pragma pack(push, 1)
struct { 
	unsigned char PUSH_RAX; 
	unsigned char MOV_RAX[2];

st98

Advent Calendar CTF 2014

ぼっチーム omakase として参加した。最終的に獲得できたポイントは 173 点でチーム順位は 24 位 (505 チーム中) だった。
1 ~ 14 日目、21 ~ 22 日目、25 日目の問題を解いた。

1 日目 warmup (misc)

'0x41444354465f57334c43304d335f37305f414443374632303134'.match(/[0-9a-f]{2}/g).map(function(c){return String.fromCharCode(parseInt(c, 16))}).join('');

flag: ADCTF_W3LC0M3_70_ADC7F2014

secretsquirrel

import os
import struct
import shutil
import subprocess


class macho_intel32_shellcode():
    """
    Mach-O Intel x32 shellcode class
    """

Zulko

"""
This creates the following GIF, where the text appears to be "embedded"
in the video and "disappears" behind rapunzel.

http://i.imgur.com/gxEHfLX.gif
"""

from moviepy.editor import *
import numpy as np
import skimage.morphology as skm

staaldraad

#!/usr/bin/python
"""
Simple tool to extract local users and passwords from most Huawei routers/firewalls config files.
Will extract plain-text passwords and  crypted credentials. Huawei config files use DES encryption with 
a known key. Using this information, the script will decrypt credentials found in the config file.
Author: Etienne Stalmans (etienne@sensepost.com)
Version: 1.0 (12/01/2014)
"""

from Crypto.Cipher import DES

xieyuheng

(define hash-table-preparation-interface
  (interface ()
    hash-table:get-size

    in-cicada-key->key
    create-in-cicada-key
    key->finite-sum
    key-equal?

    hash))

demidovakatya