Flare-On 11

[Sawyer555]

Any tips with ch#7?

Spoiler

I am able to fully communicate with the server. Tried some PH code but it doesn't work. I see people saying they did it too and suddenly understood something but I just don't.

 

[m92x]

Would someone help me with sanity check on #6 in DM?

[Sawyer555]

1 hour ago, m92x said:

Would someone help me with sanity check on #6 in DM?

Sent you a message

[0utrage7]

anyone can help me on ch#5? been stuck at here for weeks. 😭 i'm at figuring out the finding what was sent to & from the socket

[JimJ1m]

Any hint of how to start with #5, i see in the backtrace the stack look corrupted. I don't know how to fix and continue on it.

[Torraske]

On 10/29/2024 at 12:14 PM, JimJ1m said:

Any hint of how to start with #5, i see in the backtrace the stack look corrupted. I don't know how to fix and continue on it.

Spoiler

As another one said, look for the cause of the crash (when and where), the backtrace may be the starting point, there are another commands: "info proc mapping" and "info registers" that shows interesting stuff.

 

[Sawyer555]

Could anyone pm me for help in ch9 please? I'm really stuck🙏

[Torraske]

On 11/2/2024 at 6:41 PM, Sawyer555 said:

Could anyone pm me for help in ch9 please? I'm really stuck🙏

I would like to help you but I am still on ch7...

Spoiler

I got the symbols, I did a functional server, but dealing with the code, I am guessing if it is related with some weak random function...
Unfortunately, I could start the entire challenge very late (like two weeks ago) and there is no much time left.
Any nudge would be very appreciated!

 

Edited November 4, 2024 by Torraske

[troplhers]

i would like to at least get to 9 before closing. can someone give me a hand with this damn ch8?

Spoiler

i've reached the final step. i have the final script, the one that does the xor and writes to disk, but i don't understand how to use it. i can't figure out how to replenish the placeholders that are there (address, block, ...). i've tried all the combinations with the data i had so far but nothing...

 

[jwan9]

5 hours ago, troplhers said:

i would like to at least get to 9 before closing. can someone give me a hand with this damn ch8?

  Reveal hidden contents

i've reached the final step. i have the final script, the one that does the xor and writes to disk, but i don't understand how to use it. i can't figure out how to replenish the placeholders that are there (address, block, ...). i've tried all the combinations with the data i had so far but nothing...

 

I'm stuck on this part of #8 too

[jackyjask]

Flare  #11 is OVER

congrats all members that had lots of fun and love in it

PS Do not open up the link if you still solving it

[Washi]

My writeups are live now: https://washi1337.github.io/ctf-writeups/writeups/flare-on/2024/

[Teddy Rogers]

23 hours ago, Washi said:

My writeups are live now: https://washi1337.github.io/ctf-writeups/writeups/flare-on/2024/

Thank you very much for the write ups. It was interesting to read how you went about the solutions, particularly challenge nine, I think your method was a different tack most people would have made. Great effort... 👍

Ted.

[benina22]

[Reverse] Video Review Sol c5_ssh2 flare-on 11

https://rootbiez.blogspot.com/2024/11/reverse-video-review-sol-c5ssh2-flare.html