r1p - Alex B. (r1p) blog

Insomni'Hack CTF Teaser 2022 - ExPiltration [Misc/Forensics]

We participated as r3vengers (Ripp3rs + Scavenger Security), and scored 34th out of almost 500 teams, with 6/15 challenges solved. Description:Oh shit.. (!) Our network has been compromised and data stored on an air-gaped device stolen but we don't know exactly what has been extracted and how? We have 24/

writeup

Insomni'Hack CTF Teaser 2022 - DrJeb [Misc]

We participated as r3vengers (Ripp3rs + Scavenger Security), and scored 34th out of almost 500 teams, with 6/15 challenges solved. Description:Dr. Jeb was able to analyze the virus in depth. He believes in the power of open source so his disassembler is publicly available here. It's time to check

writeup

RealWorldCTF 2022 - Hack into Skynet [Web]

Real World CTF 2022 is one of the most complex CTF I have ever participated in, our team scored 44th out of 1921 teams with just 3/17 challenges solved. We participated as r3vengers (Ripp3rs + Scavenger Security). Description:Hack into skynet to save the world, which way do you prefer?

writeup

247CTF - Easy Pwn Challenge Writeups

Hidden Flag FunctionCan you control this applications flow to gain access to the hidden flag function?[foto] Given the binary "hidden_flag_function" and running a file against it: Looks like a *nix x86 binary. Running the binary, a text appears on the screen asking us if we have to

writeup

247CTF - Easy Reversing Challenge Writeups

The More The Merrier One byte is great. But what if you need more? Can you find the flag hidden in this binary?Given the binary "the_more_the_merrier". We can disassemble the main() function into: 38: int main (int argc, char **argv, char **envp); ; var char *var_8h

writeup

247CTF - Moderate Web Challenge Writeups

Compare the pairCan you identify a way to bypass our login logic? MD5 is supposed to be a one-way function right?Given the source code: <?php require_once('flag.php'); $password_hash = "0e902564435691274142490923013038"; $salt = "f789bbc328a3d1a3"; if(isset($_GET['password']) && md5($salt . $_GET['password']) == $password_hash){ echo $flag;

writeup

247CTF - Easy Web Challenge Writeups

Secured sessionIf you can guess our random secret key, we will tell you the flag securely stored in your session.Given the source code: import os from flask import Flask, request, session from flag import flag app = Flask(__name__) app.config['SECRET_KEY'] = os.urandom(24) def secret_key_to_

writeup

NiteCTF 2021 - Mailman1 [OSINT]

Challenge description Our CTO takes Git commits quite seriously. Someone in our discord channel got an email from him. Now the person wants a similar email signature like the CTO of our company, so he decided to make an email signature of his own and commit it securely. Find the

writeup

PortSwigger Academy (XSS) Cross-site scripting

1- Lab: Reflected XSS into HTML context with nothing encodedDescription: This lab contains a simple reflected cross-site scripting vulnerability in the search functionality.To solve the lab, perform a cross-site scripting attack that calls the alert function.Payload: <script>alert(1)</script> <section class=blog-header&

writeup

RedPwn 2021 - Blecc [Crypto]

CTF: RedPwn 2021Challenge information:Name: Blecc Category: Crypto Description: Blecc! What are all these numbers? This doesn't look like RSA... Author: AdnanSlef Points: 119 Solves: 146 out of 1418 teams Flag: flag{m1n1_3cc} The challenge contains a file named blecc.txt with the following content: p = 17459102747413984477 a = 2

articulo

[ESP] Defensa.com - La desaparición de las contraseñas, más fantasía que realidad.

Este post es un artículo para https://www.defensa.com/ Enlace al artículo original: https://www.defensa.com/cyberseguridad/desaparicion-contrasenas-mas-fantasia-realidad Durante años las personas se han acostumbrado a tener presencia en la web, de hecho, la mayor parte de los perfiles están diseñados para resguardar su identidad con el fin

codewars

CodeWars - several Python challenges

Some challenges I solved on CodeWars sorted by newer to older. Visit my profile here: https://www.codewars.com/users/r1p 6 Kyu - Detect PangramA pangram is a sentence that contains every single letter of the alphabet at least once. For example, the sentence "The quick brown fox jumps

articulo

[ESP] Defensa.com - Windows, Zoom, Safari y Chrome hackeados en la Pwn2Own de 2021.

Este post es un artículo para https://www.defensa.com/ Enlace al artículo original: https://www.defensa.com/cyberseguridad/windows-zoom-safari-chrome-hackeados-pwn2own-2021 Los grandes avances tecnológicos a la par de la necesidad de mantener resguardada información vital en la red de empresas, negocios y personas de todo el mundo obligan a que

writeup

ÅngstromCTF 2021 - nomnomnom [Web]

CTF: ÅngstromCTF 2021Challenge information:Name: nomnomnom Category: Web - JavaScript Description: I've made a new game that is sure to make all the Venture Capitalists want to invest! Care to try it out? Environment: Whitebox Author: paper Points: 130 Solves: 127 out of 1502 teams Flag: actf{w0ah_the_t4g_

writeup

ÅngstromCTF 2021 - Jar [Web]

CTF: ÅngstromCTF 2021Challenge information:Name: Jar Category: Web - Python (Flask) Description: My other pickle challenges seem to be giving you all a hard time, so here's a simpler one to get you warmed up. Environment: Whitebox Author: kmh Points: 70 Solves: 365 out of 1502 teams Flag: actf{you_

writeup

2020 Metasploit Community CTF – Queen of Spades (port 8202) [Web]

Port 8202 hosts a web application with a single login form. Trying to login with random credentials, we observed that it calls a GraphQL API to authenticate against the remote server. With the following payload we can dump the database schema and take a look at it: {__schema{types{name,

writeup

2020 Metasploit Community CTF – 8 of Spades (port 1080) [Networks]

Port 1080 shows a SOCKS 5 service running. We tried establishing a connection through this service, but upon failure we thought it was a false positive brought by the default nmap scripts, so we configured a proxychains route using SOCKS 4. Scanning the network with the socks proxy already set,

writeup

2020 Metasploit Community CTF - 9 of Clubs (port 1337) [PWN]

Port 1337 hosts a TCP service that prompts the user to choose one of several options, and later takes some text input. After trying several techniques, we discovered that it had a format string vulnerability When sending a random string over the second option (2. Greetings), the server replies with