https://blog.milf.club/ Recent content on Blog | MILF CTF Team Hugo -- gohugo.io en-us Fri, 12 May 2023 00:00:00 +0000 https://blog.milf.club/writeups/heroctf-v4/my-passwords/ Fri, 12 May 2023 00:00:00 +0000 https://blog.milf.club/writeups/heroctf-v4/my-passwords/ Author : baddhack Challenge Informations Description We have exfiltrated data from a malicious person's computer and we need his pastebin password. Unfortunately, the file system dump was damaged, so the only thing we were able to recover is provided to you. Can you recover his password ? Flag format : Hero{pastebin_mdp} Challmaker Worty WriteUp In this challenge we are provided with a .zip file which contains a Firefox directory. When you unzip the file and look into this directory here is what you see : https://blog.milf.club/writeups/esaip-ctf-2022/babypwn/ Sat, 04 Jun 2022 00:00:00 +0000 https://blog.milf.club/writeups/esaip-ctf-2022/babypwn/ Author : Rxphgui Nous allons aujourd’hui voir le premier challenge d’exploitation de binaire de l’ESAIP CTF. Il s’agissait d’un challenge d’introduction. Pourtant il avait moins de 10 solves. Nous n’avions simplement le binaire ainsi qu’un accès remote. Introduction Pour commencer nous allons analyser le binaire de manière assez simple : [raphgui@ret2arch:Téléchargements/pwn]$ file babypwn (06-05 16:41) babypwn: ELF 64-bit LSB executable, x86-64, version 1 (GNU/Linux), statically linked, BuildID[sha1]=950806fb3e5df438288e966762b67e0c218467a5, for GNU/Linux 3. https://blog.milf.club/writeups/esaip-ctf-2022/find-the-matrix/ Sat, 04 Jun 2022 00:00:00 +0000 https://blog.milf.club/writeups/esaip-ctf-2022/find-the-matrix/ Author : voiv0de The ESAIP CTF was overall a pretty cool event. Usually I take care of the Reverse Engineering challenges but on this one I returned to my first love : Cryptanalysis. During the CTF, I managed to obtain two first bloods in this category 🩸. Today, I present to you : Find the Matrix. The flag was encrypted by this algorithm, find a way to reverse it to get the flag! https://blog.milf.club/writeups/esaip-ctf-2022/terminal-weather/ Sat, 04 Jun 2022 00:00:00 +0000 https://blog.milf.club/writeups/esaip-ctf-2022/terminal-weather/ Author : Rxphgui Nous allons aujourd’hui voir le dernier challenge en pwn de l’ESAIP CTF. Nous n’avions pas de binaire simplement un remote. Lorsque nous nous connections nous avions cela : [raphgui@ret2arch:Téléchargements/pwn][1]$ nc terminal-weather.esaip-cyber.com 55555 (06-05 17:00) Welcome to the Terminal Weather Service ----- MENU ----- 1. Change city 2. Get weather 3. Exit Choice: Introduction Ce challenge est celui qui m’a prit le plus de temps (2 heures). Pourtant le principe est simple, on va y venir. https://blog.milf.club/writeups/esaip-ctf-2022/the-proof-of-the-malware/ Sat, 04 Jun 2022 00:00:00 +0000 https://blog.milf.club/writeups/esaip-ctf-2022/the-proof-of-the-malware/ Author : hashp4 Here is the writeup of The Proof of the Malware, a cool OSINT challenge categorized as medium during the ESAIP CTF. After some time without anybody solving the challenge I managed to first blood it🩸. Instructions : We have discovered that a person currently working at Metacortexxs is developing a powerful virus. Find the proof of the development of this virus by this employee Information Gathering - Finding the target According to the instructions, we are searching for someone who is working at Metacortexxs. https://blog.milf.club/writeups/csw-ctf-2022/badass-quotes/ Mon, 23 May 2022 00:00:00 +0000 https://blog.milf.club/writeups/csw-ctf-2022/badass-quotes/ Author : Rxphgui Aujourd’hui on va voir un challenge du CSW CTF. Un challenge de pwn dont j’ai eu le second solve (à 1 sec du first blood 0_0). Review du Code Nous avions simplement le code source en C suivant : #include <stdio.h> #include <stdlib.h> #include <string.h> int main() { char term[64]; char quote[32]; setbuf(stdout, NULL); setbuf(stdin, NULL); setbuf(stderr, NULL); memset(term, 0, 64); memset(quote, 0, 32); printf("\nI CaN HaS BaDaSs QuOtE?