Washi Posted September 8, 2023 Share Posted September 8, 2023 (edited) Seems like the website of Flare-On (http://flare-on.com/) just added a timer; Flare-On 10 is going to start on September 29! I wonder if the medal shipments of last year will be in time before this next installment Who's joining this year? Edited September 8, 2023 by Washi Link to comment Share on other sites More sharing options...
kao Posted September 8, 2023 Share Posted September 8, 2023 I don't know... without medals it's not the same... </irony> 1 Link to comment Share on other sites More sharing options...
Washi Posted September 9, 2023 Author Share Posted September 9, 2023 On 9/8/2023 at 5:00 PM, kao said: I don't know... without medals it's not the same... Seems like they had some problems with their previous vendor and that they will start shipping roughly at the same day flare 10 starts. Link to comment Share on other sites More sharing options...
akkaldama Posted September 18, 2023 Share Posted September 18, 2023 (edited) The 10th annual Flare-On Challenge begins on September 29th, 2023 at 8:00pm ET. This year's flareon contains 13 challenges! Spoiler This year’s contest will feature 13 challenges covering a variety of architectures, including 32- and 64-bit Windows, Linux, and Android; and even a retro-computing challenge involving PDP-11. Edited September 18, 2023 by akkaldama Link to comment Share on other sites More sharing options...
akkaldama Posted September 19, 2023 Share Posted September 19, 2023 (edited) Deleted Edited September 20, 2023 by akkaldama Link to comment Share on other sites More sharing options...
kao Posted September 28, 2023 Share Posted September 28, 2023 Quote #flareon10 Early Registration is now live! https://flare-on10.ctfd.io/register Source: https://twitter.com/nickharbour/status/1707387365407215685 Link to comment Share on other sites More sharing options...
bluedevil Posted September 29, 2023 Share Posted September 29, 2023 Did you prepared your VM's? Link to comment Share on other sites More sharing options...
Kurapica Posted September 29, 2023 Share Posted September 29, 2023 1 4 Link to comment Share on other sites More sharing options...
jackyjask Posted September 29, 2023 Share Posted September 29, 2023 2 hours ago, bluedevil said: Did you prepared your VM's? which one is your favorite one Link to comment Share on other sites More sharing options...
kao Posted September 29, 2023 Share Posted September 29, 2023 3 hours ago, bluedevil said: Did you prepared your VM's? My primary machine actually decided to die on me today... And since I'm "old sk3wl CTFer", I don't have all my infra in the cloud. 1 1 Link to comment Share on other sites More sharing options...
Coca Posted October 2, 2023 Share Posted October 2, 2023 Someone finish the ch#2 ? Spoiler The pictures IV.png and ps.png are important or just another decoy? Thanks ! cheers Link to comment Share on other sites More sharing options...
cybercat Posted October 4, 2023 Share Posted October 4, 2023 (edited) Spoiler yes Edited October 4, 2023 by cybercat Link to comment Share on other sites More sharing options...
Coca Posted October 4, 2023 Share Posted October 4, 2023 Finally i did it the ch#2. hahaha😂 Link to comment Share on other sites More sharing options...
pcmcia Posted October 5, 2023 Share Posted October 5, 2023 I need a nudge for #5. Spoiler I have decoded multi-stages of the payload. I got to the code where it pops up the message box. I also figured it out how different parts of the code communicate with each other. I also found the hint near the code that popped up the message box. However, I cant seem to locate what the thing/function the hint was pointing at. Thanks in advance! Link to comment Share on other sites More sharing options...
kao Posted October 5, 2023 Share Posted October 5, 2023 (edited) @pcmcia: Spoiler you need to find the exact thing that you can't seem to locate. Then feed it with some data. Edited October 5, 2023 by kao Link to comment Share on other sites More sharing options...
pcmcia Posted October 5, 2023 Share Posted October 5, 2023 (edited) 44 minutes ago, kao said: @pcmcia: Hide contents you need to find the exact thing that you can't seem to locate. Then feed it with some data. Thanks for the reply / nudge! Spoiler I think I found the thing I needed to located. I'm trying to feed it some "data" to unlock it. But I can't seem to find that. Is this some kind of guess work? Also, how long is that "data" I need to feed it? Edited October 5, 2023 by pcmcia Link to comment Share on other sites More sharing options...
kao Posted October 5, 2023 Share Posted October 5, 2023 For everyone playing Flare-On this year - no challenge requires a *significant* computing power for bruteforcing large values, or an *unreasonable* guessing game. You might need to Google some things but that's about it. @pcmcia: it's all there, keep looking. I can't tell you anything else w/o giving a full solution. Link to comment Share on other sites More sharing options...
jackyjask Posted October 6, 2023 Share Posted October 6, 2023 editing opcodes directly in memory - that is very confusing approach (ch#3) Link to comment Share on other sites More sharing options...
Kolombo Posted October 8, 2023 Share Posted October 8, 2023 (edited) Oh... I'm on FlareSay task. How to get that key with a hash, any ideas? It seems not possible to brute that number of bytes. Im pretty sure the result has to be Winning + decrypted string (0x54 bytes) using that key. I wonder if this task is about knowledge in crypto and there is some kind of crypto mistake, or need to search around.. P.S. [LATER] Hah... understand. Crazy. I hadn't been born yet. Edited October 8, 2023 by Kolombo Link to comment Share on other sites More sharing options...
Washi Posted October 8, 2023 Author Share Posted October 8, 2023 18 minutes ago, Kolombo said: P.S. [LATER] Hah... understand. Crazy. I hadn't been born yet. Sometimes just narrating what you've done so far really works wonders doesn't it 1 Link to comment Share on other sites More sharing options...
test Posted October 9, 2023 Share Posted October 9, 2023 I have also a question regarding ch5: Spoiler I found the hint with the crypto algorithm but dont no where to look for it. I have also seen the decryption of the resources but I'm not sure if this is the algorithm that is to be found. Maybe somebody can help Many thanks in advance Spoiler Spoiler Link to comment Share on other sites More sharing options...
Kolombo Posted October 9, 2023 Share Posted October 9, 2023 (edited) I just guessed ch5, where it might be and hit the nail from the 1st attempt. It is quite straightforward. I'm really not sure if it is possible to solve other way (if anyone did please tell). So, you have a hint, find where and apply the hint. Actually you have everything at this point. People tend to be lazy to do another way the thing you have already analysed. Edited October 9, 2023 by Kolombo added info Link to comment Share on other sites More sharing options...
Washi Posted October 9, 2023 Author Share Posted October 9, 2023 @test Spoiler You can find an open source implementation of the algorithm on the web. You can then try to cross-reference it with anything you have found. Link to comment Share on other sites More sharing options...
test Posted October 9, 2023 Share Posted October 9, 2023 1 hour ago, Washi said: @test Reveal hidden contents You can find an open source implementation of the algorithm on the web. You can then try to cross-reference it with anything you have found. Thanks for the response. Spoiler Thats what I tried all the time but I'm not really sure if I'm looking at the right spot. I tried to look for constants, but wasn't able to identify anything similar Link to comment Share on other sites More sharing options...
Kolombo Posted October 9, 2023 Share Posted October 9, 2023 (edited) Spoiler Hmm.. I think the way to identify the place where the algo using open source implementation is difficult in this case and time consuming. Just need to set a HW BP where the first byte will be written. You have a process creation and the memory where the decryption is done. Just backtrace it, find a call, identify params and use it to decrypt the last stage. That way I did. Edited October 9, 2023 by Kolombo Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now