All things rǝvǝrsǝd

gynvael

Gynvael - Mission 015 - Solution

Last time, there was no mission on EN stream, so I've decided to describe the one from PL stream sice it was also quite a nice one. The mission is located under https://goo.gl/rs1A2f and the most important part there is that it points to another

gynvael

GynvaelEN - Mission 19 - Solution

Gynvael is back with streams and with missions. The 39th stream contains mission no 19 that can be found here. In this mission we are given a CHIP-8 ROM image. This is clearly a reference to the latest streams about this topic (#34, #35, #36, #37, #38). If you don&

ECMS

ECSM 2017 CTF

I really liked the last year ECSM 2016 CTF created by CERT & p4 team and I was a bit down learning that this year it was scheduled on the days I was pretty busy traveling. In fact only yesterday I had some time to look closely (I did check

p4

SecurityPWNing 2017 - p4 CTF

On 6th & 7th November 2017 there was a 2nd edition of Security Pwning conference held in Warsaw and, like the last time (link1, link2), there was a CTF organized by the P4 team. This year I did a bit better then the last time - 8th position (the last

gynvael

GynvaelEN - Mission 018 - Solution

This is an another GynvaelEN mission solution. This time, the task is simple. We're given a script and we nned to find the correct password to get the flag. The script is a simple MD5/SHA1 comparison that uses a weak equals operator (==) and we can exploit that.

gynvael

Gynvael - Mission 012 - Solution

This mission was on the Polish stream, but it's a nice one so I've decided to describe it anyway. If you don't understand the language let me quickly bring you up to speed - you are given a ZIP file in order to extract

ctf

How do I approach this ctf debugging program - step by step

Another good question from RE on Stack Exchange. I've already posted an answer there, but here let's put a bit more explanation and answer the question in the title. So how do you approch this CTF challenge? Well basicly the sam way you would do with

gynvael

GynvaelEN - Mission 17 - Solution

Another stream from Gynvael - another mission. This time we need to extract a message from a restriced admin panel. What we see on the page is a welcome message, and an info that the cookie was stored and a request to reload the page. So he "Hit Refresh&

gynvael

GynvaelEN - Mission 16 - solution

Another week another mission on English side of the youtube channel. This time we are given an info that the transmission was intercepted. You can read more info here. After inspecting the link we are given a huge file of ascii printable characters that looks like base64 string. So we

crackme

Reverse engineering of Managed C++/C# CrackMe - solution

A nice question was posted on Reverse Engineering at Stack Exchange and since it was a an interesting one I've decided to give a bit of lengthy description here (apart from my answer there). The question can be found here and the OP asks about a bit different

gynvael

GynvaelEN - Mission 15 - Solution

Another Wednesday, another mission. This time we've got a vulnerability that allows leaking any via as a image - link :) So we download the attached image and got this: The immediate conclusion is that the bars represent chars in the file and the ascii value are represented by

gynvael

Gynvael - Mission 010 - Solution

This mission is actually published on the Polish stream but I've decided to write the solution here, in English. So what's this mission is about? We are given the PDF file with the instructions to retreive the hidden message. If you didn't know it

gynvael

GynvaelEN - Mission 14 - Solution

Stream: https://www.youtube.com/watch?v=rhsH-snYkIc Mission link: https://goo.gl/oUg99i Damn it, how will I ever get out of this labyrinth? ― Simón Bolívar This mission in comparison to the previous one was an easy one. This was a PPC category (programming). In this one we'

mission

GynvaelEN - Mission 13 - Solution

“Never stop dreaming, never stop believing, never give up, never stop trying, and never stop learning.” ― Roy T. Bennett, The Light in the Heart Boy, that was a hard one but also very challenging task. In this mission we're given a PCAP file and an information that we&

gynvael

GynvaelEN - Mission 12 - Solution

In this mission we are given the data from the hardware logger. On the first look we see some printable characters but nothing obvious. To solve this we need to get some knowledge about scancodes. The article on Wiki gives some clue that we might be on a right track

gynvael

GynvaelEN - Mission 11 - Solution

If you don't know Gynvael - check his channel where he shows some RE/hacking stuff. After each video he posts some small challenge for solving by viewers. In this post I'll show how to solve mission 11. In this task we're given a

sha-2017

SHA2017 Teaser

On last Saturday there was a SHA2017 teaser and here are some tasks solutions. I'll skip the 'Are you safe?' task as it was a simple provide a domain with SSL certificate that would score A/A+ on SSL Labs! Follow Me (Web 100) The task

Import 2022-11-28 18:17

I know I know nothing*

Learning for CTF is hard. Different type of puzzles and lack of You never know what you can expect so you need to sharpen your saw constantly. With some difficult challenge presented during CTF probably everyone feels that they don't know enough. I had this feeling during the

ctf

SECCON 2016

Yesterday (actually it has just finished today at 7 AM CET) there was a 24h SECCON CTF. We did took part in it, collected 5100 pts and came 6th. Here are the tasks I've solved. basiq - Web 100 basiq What is admin's password?☺ http://basiq.

ctf

ECMS 2016 CTF

There's a little CTF developed by CERT and p4 CTF team that I was cracking my brain at few days ago. I found it quite enjoyable so I've put a written solution for it. The whole CTF is in Polish but the solution here will be

ctf

Security Pwning CTF by p4 - cont

In the last post I've promised that I need to look a bit more into the Security Pwning CTF, here are a few more solutions to CTF by p4. web 100 - Bulletproof Login Server™ In this task we are give a part of the server code and

Import 2022-11-28 18:17

Qiwi Infosec CTF & RC3 CTF

Last week there were two CTFs I've participated in. Qiwi-Infosec CTF-2016 & RC3 CTF 2016 were both quite an interesting. The first one, due to being during the week, I couldn't give as much hours as I could. In the second one I gave much more

ctf

Security Pwning CTF by p4

A few days ago, I've attended a Security PWNinng 2016 conference in Warsaw. There was a CTF during the event in which I took part and solved few tasks. The CTF was organized by p4 team. If you want to have a try it's still available

ctf

EKOPARTY CTF

Another CTF during in the week - I hate that (I can't participate as much I as want too) but anyway I've took part in this CTF too. My contribution: * tasks solved: 2 * points: 150 * time spent: 12h 32m As stated above I've only

ctf

Hack.lu 2016

Hack.lu a 24h CTF contest that I was attending after the HitCon. It was challenging for me due to the fact that it was during the week (Wednesday 10:00 UTC - Thursday 10:00 UTC). Again during this CTF I was playing with the Dragons (Dragon Sector team)