Challenge Description Difficulty : Medium Points : 250 Categoty : DFIR Walkthrough We are given with a memory dump and we are asked to recover a password from the memory dump.
I used Volatility to analyse the memory dump.
First step was to find more information about the memory dump.
vol.py -f mem.raw imageinfo Find list of running processes.
vol.py -f mem.raw --profile=Win7SP1x64 pslist vol....
Challenge Description Difficulty : Medium Points : 250 Categoty : Web Walkthrough The Meme Generator website allows you generate a Meme by seaching a term on any one of the 3 below search engines.
Google DuckDuckGo Search Encrypt When searching on any of the search engines, the search URL would look like this.
# Google https://google.com/?q=<MEME_SEARCH_TERM> # DuckDuckGo https://DuckDuckGo.com/?q=<MEME_SEARCH_TERM> # Search Encrypt https://searchencrypt.com/?q=<MEME_SEARCH_TERM> # General Format https://<SEARCH_ENGINE>....
Challenge Description Difficulty : Easy Points : 150 Categoty : Web Walkthrough The page source had a comment with details of an endpoint which reveals the PHP source code. Accessing the /?source= endpoint shows the following source code.
<?php //Show Page code source if (isset($_GET["source"])) { highlight_file(FILE); } // Juicy PHP Part $flag = getenv("FLAG"); if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST["email"]) && isset($_POST["pass"])) { if ($_POST["email"] === "admin@naruto....
Challenge Description Difficulty : Easy Points : 150 Categoty : Web Walkthrough The challenge home page shows a list of songs and allows the user to search for songs.
Checking the robots.txt files reveals a new directory location /superhiddenadminpanel/. Accessing the new location shows a page where it asks for admin password.
When searching for songs in the home page, it showed a message that the search query should be atleast 5 characters long....
Intro Challenges which I was able to solve in playsecure CTF and the scoring, rank etc.
...
Challenge Description Reverse engineer the attached file to get the flag.
Difficulty: Medium
Category: Reverse
...
Challenge Description Introducing Color Generator! Enter an expression that returns a number and get a color! This can’t be abused! …right?
Flag is in /etc/flag.txt
Connect to the challenge at exploitation.ps.ctf.ae:2020
...
Challenge Description Can you point to the stars? Make the pointer point to the flag!
Connect to the challenge at exploitation.ps.ctf.ae:5454
...
Challenge Description Just a welcome card generator website. Nothing vulnerable here! Some characters are filtered to prevent exploitation. Good luck! The flag is well…somewhere. Find it on the system! It’s still called flag.txt.
Challenge: http://web.ps.ctf.ae:8882/
Difficulty: Medium
Category: Web
...
The Bandit wargame is aimed at absolute beginners. It will teach the basics needed to be able to play other wargames.
...