Black Hat MEA 2022 - Qualifier - MEM

Challenge Description Difficulty : Medium Points : 250 Categoty : DFIR Walkthrough We are given with a memory dump and we are asked to recover a password from the memory dump. I used Volatility to analyse the memory dump. First step was to find more information about the memory dump. vol.py -f mem.raw imageinfo Find list of running processes. vol.py -f mem.raw --profile=Win7SP1x64 pslist vol....

October 4, 2022 · 2 min · Rizal

Black Hat MEA 2022 - Qualifier - Meme Generator

Challenge Description Difficulty : Medium Points : 250 Categoty : Web Walkthrough The Meme Generator website allows you generate a Meme by seaching a term on any one of the 3 below search engines. Google DuckDuckGo Search Encrypt When searching on any of the search engines, the search URL would look like this. # Google https://google.com/?q=<MEME_SEARCH_TERM> # DuckDuckGo https://DuckDuckGo.com/?q=<MEME_SEARCH_TERM> # Search Encrypt https://searchencrypt.com/?q=<MEME_SEARCH_TERM> # General Format https://<SEARCH_ENGINE>....

October 4, 2022 · 3 min · Rizal

Black Hat MEA 2022 - Qualifier - peeHpee

Challenge Description Difficulty : Easy Points : 150 Categoty : Web Walkthrough The page source had a comment with details of an endpoint which reveals the PHP source code. Accessing the /?source= endpoint shows the following source code. <?php //Show Page code source if (isset($_GET["source"])) { highlight_file(FILE); } // Juicy PHP Part $flag = getenv("FLAG"); if ($_SERVER['REQUEST_METHOD'] === 'POST') { if (isset($_POST["email"]) && isset($_POST["pass"])) { if ($_POST["email"] === "admin@naruto....

October 4, 2022 · 3 min · Rizal

Black Hat MEA 2022 - Qualifier - Spatify

Challenge Description Difficulty : Easy Points : 150 Categoty : Web Walkthrough The challenge home page shows a list of songs and allows the user to search for songs. Checking the robots.txt files reveals a new directory location /superhiddenadminpanel/. Accessing the new location shows a page where it asks for admin password. When searching for songs in the home page, it showed a message that the search query should be atleast 5 characters long....

October 4, 2022 · 1 min · Rizal

Playsecure CTF 2021 - My Stats - RIZARU

Intro Challenges which I was able to solve in playsecure CTF and the scoring, rank etc. ...

March 29, 2021 · 1 min · Rizal

Playsecure CTF 2021 - Reverse Engineering - 0x03

Challenge Description Reverse engineer the attached file to get the flag. Difficulty: Medium Category: Reverse ...

March 29, 2021 · 3 min · Rizal

Playsecure CTF 2021 - Color Generator

Challenge Description Introducing Color Generator! Enter an expression that returns a number and get a color! This can’t be abused! …right? Flag is in /etc/flag.txt Connect to the challenge at exploitation.ps.ctf.ae:2020 ...

March 28, 2021 · 5 min · Rizal

Playsecure CTF 2021 - Point To The Stars

Challenge Description Can you point to the stars? Make the pointer point to the flag! Connect to the challenge at exploitation.ps.ctf.ae:5454 ...

March 28, 2021 · 2 min · Rizal

Playsecure CTF 2021 - Welcome Card

Challenge Description Just a welcome card generator website. Nothing vulnerable here! Some characters are filtered to prevent exploitation. Good luck! The flag is well…somewhere. Find it on the system! It’s still called flag.txt. Challenge: http://web.ps.ctf.ae:8882/ Difficulty: Medium Category: Web ...

March 28, 2021 · 5 min · Rizal

OverTheWire - Bandit

The Bandit wargame is aimed at absolute beginners. It will teach the basics needed to be able to play other wargames. ...

May 9, 2018 · 14 min · Rizal