[Hack.lu 2016] [EXPLOIT 200 – dataonly] Write upCthulhu is too chaotic and has lost the machine with his files. Cthulhu still has an old fileserver running on it though… Get the flag from /flag in the filesystem.
Connect to cthulhu.fluxfingers.net:1509.
Binaries
Continue reading [Hack.lu 2016] [EXPLOIT 200 – dataonly] Write up
[Hitcon 2016] [WEB 100 – %%%] Write UpAlthough it is easy, but I still made this challenge because it is useful in penetration testing.
This challenge doesn’t allow DIRBUSTER or other SCANNER.
[Hitcon 2016] [REVERSE 50 – Handcrafted pyc] Write UpHandcrafted pyc
238 Teams solved.
Description
Can your brain be a Python VM? (Please use Python 2.7)crackme
Hint
None
Continue reading [Hitcon 2016] [REVERSE 50 – Handcrafted pyc] Write Up
[TUMCTF 2016] [EXPLOIT 200 – c0py_pr073c710n] Write UpSoftware piracy is a crime!
Don’t steal our hard work.
nc 104.154.90.175 54509
downloadHINT: 2.19-18+deb8u4
Solved by: 26
Bonuspoints: 11
Continue reading [TUMCTF 2016] [EXPLOIT 200 – c0py_pr073c710n] Write Up
[TUMCTF 2016] [EXPLOIT 150 – boot2brainfuck] Write UpYou are still trying to get code execution on your own? Hahaha.
There is an app for that!
We are now introducing Remote Code Execution as a Service (RCEaaS).
Pro tips:
+[—>++<]>.++++[->++++<]>+.++++++++++.———-.+++++++++++.[—->+<]>+++.-[—>++<]>–.++++++++++++..—-.[–>+<]>++.———–..[—>+<]>+++.[—>+<]>.——–.[->+++++<]>–.+[—>+<]>++++.++++++.[—>+<]>—–.—[->++<]>.++[—>++<]>+.>++++++++++.
Flag is at A:\FLAG.TXT
No keyboard input in the Freemium version :/
nc 130.211.155.146 20666
download
Solved by: 26
Bonuspoints: 11
Continue reading [TUMCTF 2016] [EXPLOIT 150 – boot2brainfuck] Write Up
