Expertise gained during Capture The Flag competitions to support the security research community
CTF: EKOPARTY CTF 2017 Points: 498 (solved by 2 teams) Category: Web, RE DESCRIPTION In this challenge we were given a URL of a web service – http://hhvm.ctf.site:10080/ and two shell commands which were used to run the service:
|
1 |
$ hhvm --hphp -t hhbc -v AllVolatile=true --input-dir . -o HHVM |
CTF: ASIS CTF Finals 2017 Points: 343 Category: forensic Recon In this task we were provided with a file called ifhe_Find_Out [sic]. Let’s try to find some information about it:
|
1 2 |
$ file ifhe_Find_Out ifhe_Find_Out: data |
Well, that’s not helpful at all. Time to look…
CTF: EKOPARTY 2017 Points: 496 Category: Web Description “We will never make the same mistakes again, we challenge you to read our messages and earn some BTCs!” – DPR https://silkroadzpvwzxxv.onion/ In this web challenge we’re presented with a website in…
Recently, we’ve observed a strange behavior of the chat service platform we’re using for everyday communication – Rocket.Chat. Rocket.Chat allows users to format their messages with Markdown syntax. Among available options, there is inline code syntax – `code`, which will…
When dealing with firmware images we often find large blobs of binary data which look totally random. The key question then is whether they are encrypted or compressed and which algorithm was used? During Veles development I noticed that for…
CTF: CTFZONE 2017 Points: 921 Category: Web, PPC Description We’ve heard that your candidate is experiencing financial difficulties during his election campaign. If media finds out, it will be a disaster. You have one day to fix this problem. Otherwise…
Decrypt the undecryptable CTF: CTFZone 2017 Points: 724 Category: ppc, reverse Description Oh noes! It looks like we’ve lost decryption keys to our super-secret archive that contains all the blackmail material we’ve accumulated over the years! Luckily, the encryption system…
CodiSec had been planning its trip to Japan ever since we successfully qualified for the CTF competition in Tokyo, but we don’t plan to take a moment’s rest from there, not with the next step of our journey bringing us…
The CodiSec team has given us yet another reason to be proud! This time it was at last weekend’s
Victory! CodiSec CTF team captured the most flags — and the title — at recent CTF held during SecurityFest conference in Göteborg, Sweden. CodiSec beat out 200 global competitors, going down to the wire against a Korean team they overcame…