PicoCTF Archives - Page 3 of 3

PicoCTF 2017 – looooong

June 16, 2017March 3, 2021 thefluffy007

Another day, another challenge…

Today’s blog post is to solve the looooong challenge from PicoCTF.

After login and opening the challenge we see the following:

We need to see how fast our typing speed.

Clicking on the hints we see the following:

Going to the command line and connecting to the server we get the following:

We see that we have thirty seconds to enter the following 533 r’s an a single 3.

The hint stated we should try using python.

I can’t say enough about Python. It’s a GREAT first language for beginners to learn. TheNewBoston on YouTube has a good tutorial on Python.

Anyway, back to the challenge – going to Google and typing “Python interpreter online” we’re presented with the following here.

Python has a great way of printing characters multiple times with the following:

print ‘a’ * 399

This will print a 399 times.

I have to admit I had to do this challenge a couple of times as I was slow.

I’m going to add the screenshots of the challenge I was able to solve.

Going to the link I provided I typed – print ‘v’ * 538 – I was presented with:

Copying the v’s and going back to our challenge, if we right click in the command line and select paste from browser we get the following:

Entering the v’s and adding the single 1 at the end and pressing OK I received the following:

We received the flag and acquired 20 points!

Word of advice – have AT LEAST two window open. 1 window with the challenge, the second window of the python interpreter.

capture the flag, hacking

PicoCTF 2017 – Leaf of the Tree

June 15, 2017March 3, 2021 thefluffy007

Another day, another challenge…

Today’s topic will show how to solve the Leaf of the Tree challenge from the PicoCTF.

Clicking on the challenge we see the following:

We need to find the flag, but it’s located in an annoying named directory. The challenge tells us that we should use the cat and ls commands.

Clicking the hints we see the following:

Nothing much here except that tab completion is our friend.

Going to the command line and navigating to the folder in the challenge we see:

Hmm… a trunk directory, let’s change our current directory (cd) to the trunk directory and list the contents.

Doing that we get:

Two more folders… let’s go to the trunkef96 directory and see what’s in that directory.

Another folder… trunk99e1, let’s see what’s in that directory.

Three more folders. Let’s look what’s inside of the trunk54f4 directory.

Going to trunk61be and looking at the contents in that folder we see:

Going to the trunk61be and looking at the contents in that folder we see:

Going to the trunk89be and looking at the contents in that folder we see:

Going to the trunk87bf and looking at the contents in that folder we see:

Going to the trunkb252 and looking at the contents in that folder we see:

OK – there’s the flag. Let’s use the cat command to open the file and see if the flag is there.

We found the flag, and acquired 30 points in the process!

capture the flag, hacking, web application security

PicoCTF 2017 – Internet Kitties

June 14, 2017March 3, 2021 thefluffy007

Another day, another challenge…

Today’s blog post we will solve a problem in the PicoCTF challenge.

Let’s start!

After logging into the CTF, and clicking on the “Internet Kitties” challenge we’re presented with the following:

Reading the description, really doesn’t give a lot of clues. Clicking on the hints tab we see:

OK, so we need to use the netcat command. On the right side of the panel we’re presented with a command prompt. After logging in we have the following:

Executing the help command (nc -h) in the command prompt we see:

The first line we see is how to connect to a server. Maybe we can use this to solve the challenge?

Looking at the challenge again we have the host name and port.

Let’s try it and see what we get:

We found the flag! Entering the flag we scored 10 points!

capture the flag, hacking, web application security

PicoCTF 2017 a Brief Introduction

June 14, 2017March 3, 2021 thefluffy007

Another day, another challenge…

Today’s blog post will discuss another CTF – PicoCTF.

The target audience for PicoCTF is a computer security game that is aimed at middle school and high school students, but anyone can join and play.

Topics explored are: forensics, cryptography, reverse engineering, web exploitation, binary exploitation, and miscellaneous challenges.

To learn more, go here.

Happy hacking!