adicto Posted September 14, 2021 Share Posted September 14, 2021 1 hour ago, Washi said: Reveal hidden contents Verify that you are using the right "source data" for the actual messages. Thank you!!!! @Washi Link to comment Share on other sites More sharing options...
Darth Blue Posted September 15, 2021 Share Posted September 15, 2021 (edited) Hello i am on chall #9 Any hints are welcome Spoiler I have found the api-func resolver function and the exception handler function. I still didn't get what the challenge does unfortunately Edited September 15, 2021 by Darth Blue typo Link to comment Share on other sites More sharing options...
bianrycat Posted September 15, 2021 Share Posted September 15, 2021 Any hint for challenge #5? I can't seem to be able to figure out even the 1st step Link to comment Share on other sites More sharing options...
adicto Posted September 15, 2021 Share Posted September 15, 2021 1 hour ago, bianrycat said: Any hint for challenge #5? I can't seem to be able to figure out even the 1st step It’s partly an IR forensic challenge. Triage the machine. Snoop around and check artifacts that you would check if you were investigating a machine for inspection Link to comment Share on other sites More sharing options...
bianrycat Posted September 15, 2021 Share Posted September 15, 2021 25 minutes ago, adicto said: It’s partly an IR forensic challenge. Triage the machine. Snoop around and check artifacts that you would check if you were investigating a machine for inspection Thank you! Got it now Link to comment Share on other sites More sharing options...
score1 Posted September 15, 2021 Share Posted September 15, 2021 Hi Any tips for ch 4 Thanks Link to comment Share on other sites More sharing options...
saagaraS Posted September 16, 2021 Share Posted September 16, 2021 On 9/15/2021 at 5:06 AM, adicto said: Thank you!!!! @Washi Hi! I am having the same problem with the actual larger message to process. How is it different from the others? Link to comment Share on other sites More sharing options...
kao Posted September 16, 2021 Author Share Posted September 16, 2021 @saagaraS Spoiler If you mean the 10KB message, you should be able to recover at least part of it. But even if you can't, that message is only "nice-to-have" and challenge can be solved without it. Link to comment Share on other sites More sharing options...
saagaraS Posted September 16, 2021 Share Posted September 16, 2021 (edited) @kao Spoiler Not too sure if this is appropriate to be posted here or a DM is better. I am referring to the one together with the message with the PNG header I figured it out in the end. Thanks! Edited September 16, 2021 by saagaraS Link to comment Share on other sites More sharing options...
Remtaku Posted September 16, 2021 Share Posted September 16, 2021 Hi, I'm actually having a hard time understanding how to procced with challenge 8. Spoiler I figured out where most of the code snippets are from. The rest of the part and how the input is used doesn't make sense. Any hints on how to move forward ? Link to comment Share on other sites More sharing options...
adicto Posted September 16, 2021 Share Posted September 16, 2021 Yeah im stuck on 8 as well. Of all things javascript lol. Finding new respect for it The code just comes out as garbage Link to comment Share on other sites More sharing options...
Remtaku Posted September 16, 2021 Share Posted September 16, 2021 27 minutes ago, adicto said: The code just comes out as garbage Yeah. Link to comment Share on other sites More sharing options...
adicto Posted September 16, 2021 Share Posted September 16, 2021 for number 8, I understand what to input and how long its supposed to be. Question is how are we supposed to reverse that input to get the correct output haha. I think I'm missing a clue somewhere Link to comment Share on other sites More sharing options...
kao Posted September 16, 2021 Author Share Posted September 16, 2021 @adicto: Spoiler You can make a good guess what output should look like. Link to comment Share on other sites More sharing options...
Oggy Posted September 17, 2021 Share Posted September 17, 2021 Somebody could give me a little hint #7 Link to comment Share on other sites More sharing options...
Darth Blue Posted September 17, 2021 Share Posted September 17, 2021 @kao i am on chall #9 Spoiler I have found the 4 string (L0ve, 5Ex ...) but i still cannot get how rsa use these as a key! Thanks for any hint Link to comment Share on other sites More sharing options...
kao Posted September 17, 2021 Author Share Posted September 17, 2021 @Darth Blue: good job, you're almost there! I can't give you any hint without giving out a full solution. Spoiler There is no RSA Link to comment Share on other sites More sharing options...
Darth Blue Posted September 17, 2021 Share Posted September 17, 2021 @kaothank you i am on to it Link to comment Share on other sites More sharing options...
unionselect Posted September 17, 2021 Share Posted September 17, 2021 I can decrypt files in 5, but it's gibberish. Does that mean my decryption isn't good, or that I'm missing another piece. If I encrypt my own test file it decrypts without issue. Anyone willing to DM? Link to comment Share on other sites More sharing options...
kao Posted September 17, 2021 Author Share Posted September 17, 2021 @unionselect: you've done just the very first step of the challenge. Now you need to figure out the rest. Link to comment Share on other sites More sharing options...
unionselect Posted September 17, 2021 Share Posted September 17, 2021 Should I be looking in the same binary? Or back in the VM? I've found nothing in either, lol Link to comment Share on other sites More sharing options...
bohaw Posted September 17, 2021 Share Posted September 17, 2021 @unionselectAre all of the files gibberish? Or is at least one in readable text? Link to comment Share on other sites More sharing options...
unionselect Posted September 18, 2021 Share Posted September 18, 2021 3 hours ago, bohaw said: @unionselectAre all of the files gibberish? Or is at least one in readable text? Thanks. I noticed that a few hours ago. I'm kicking myself, because I wasted a lot of time checking the first three and giving up on them, lol. Link to comment Share on other sites More sharing options...
pepegaswiper69 Posted September 18, 2021 Share Posted September 18, 2021 I've been stuck on chall 8 for 3 days now Spoiler I know that we need to input something that will decrypt the blob into executable JS code, but I can't seem to guess what that code will look like. I'm trying to search the encrypted blob for some possibilities and derive the input from them, for example some JS keywords like "function", "return" and stuffs, but the result doesn't seem to be correct. Am I going in the wrong direction? Link to comment Share on other sites More sharing options...
kao Posted September 18, 2021 Author Share Posted September 18, 2021 @pepegaswiper69: the direction is right, just one of your assumptions is wrong. Spoiler 3 hours ago, pepegaswiper69 said: JS code What symbols it may/may not contain? 2 Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now