From f4b63118eafbf08cc3013f099a2523d7c9dd1dad Mon Sep 17 00:00:00 2001 From: MQ Date: Thu, 26 Aug 2021 23:25:35 +0530 Subject: [PATCH 1/2] Finland --- writeups/Mu-Onam-CTF/Finland/files/code.py | 11 ++ writeups/Mu-Onam-CTF/Finland/img/Finland0.png | Bin 0 -> 3325 bytes writeups/Mu-Onam-CTF/Finland/index.html | 153 ++++++++++++++++++ 3 files changed, 164 insertions(+) create mode 100644 writeups/Mu-Onam-CTF/Finland/files/code.py create mode 100644 writeups/Mu-Onam-CTF/Finland/img/Finland0.png create mode 100644 writeups/Mu-Onam-CTF/Finland/index.html diff --git a/writeups/Mu-Onam-CTF/Finland/files/code.py b/writeups/Mu-Onam-CTF/Finland/files/code.py new file mode 100644 index 0000000..cf85904 --- /dev/null +++ b/writeups/Mu-Onam-CTF/Finland/files/code.py @@ -0,0 +1,11 @@ +import hashlib + +string = 'catch-me-if-you-can+' +number = 631550310 + +while True: + number = number + 1 + hash = hashlib.sha256(f'{string}{number}'.encode()).hexdigest() + if '00000000'in hash: + print(number) + break \ No newline at end of file diff --git a/writeups/Mu-Onam-CTF/Finland/img/Finland0.png b/writeups/Mu-Onam-CTF/Finland/img/Finland0.png new file mode 100644 index 0000000000000000000000000000000000000000..b4ef79981f462c2c9f9f5aca7cfbaafa2e47ed8e GIT binary patch literal 3325 zcmV{?tbih*h`8ulSbJF& zALtWwEvTp{ML;4dx-J4LHg>I`U;#y{Aiai?5R!Qx0-;Kx5Kwo1pJwj4=brzZ+?lyE zb8isnHB!TIgVYf*aX{J7P>hzQaT^n-^Mf*X3Ncrv$;PViAHmlj00>Gi;QH9z+*+)%qRG{W+%naW>v-J7JZ5Ofx zwytXBz3=CwO{bfjY^Lbz4MA!@J-8km8vh0W5WLj!&{MgGem$66#;-4-x%`aJ*i}p2 ztD4bYj|7^?(!@wa9HLF9&)`*PthnyH>H=>Y<<{efiVhy`lT7p|P?viD%Aw$RPU~+) zmN#;8wl&hxmW0}@%(Sb)7hab$`Kr9F@2%MQ+F_-;MR&e}Kt@?Du%2i#SWS)0WxP-Q zn;sICS<@siE&zzh4PW8mFhW<8RhoM*Cb*8nZGUFth;r6TmY9#!8!S&N&(FLWedcCz zu`q&qlV>51`Afm~Y^Eqocd$^ZOp4)7nm^k_?(+F-TP_`LN(!2{@`x~+B(FKx5c63H!3_Y5D zKjnku@M$yDa&D!T35-jWFgkR6hf4jcvuA@JzAiAZ{>4<8R+$oiH=6+f2wvRt;2)OC zwUI$V;a3uhK*il-CHq;zyVfo%qC5`_IHLT~8xLNkzj&4Yf_`v50O(AgLPCUfSGDqv z3_qz!Yr8Hk4G2DebRKV;BsnfBDr%eriMNa3B?2QZx@btWZ$W?U(a^wU-L@QcF?5!J z48O$lOjw||F>l*+V?cQDUJ4FrZJFj15^;Q^i7>uBLsOnhr_+~@9@MT3At8t`aZNV` zM1=TC;9Jv&5RP4F8@#Jp?YbBdIE>nss|j0A1o_PrMpf_g+~)`wV{zGKYi(vaIkal?W|EzbnfIxZ5Nj}iF{ zAzS7&6~(@(;_s%^HjyM{dE0h|(nWVd8o6kzhWhglie(J#gz@bewK)^mjqlFAC~tp= zO|7H7p5xjWNEamrG5B{}w3*%RqW{wzt-6BCAAv+|B|D*zs%R;UDiCF!zYYOoEC4_` z^`F?v=lmT#=d7{tjodO*7XWH96K&^iEN}ke50lIiCJwL6-%U83Y`bNJSkOimiW)B+ zQTF(crmwx}H*vT?Y&lQV#Ryqhb?vQnS#<;}O<{a{hNdOnT>tcQ8hehbB}T}~uIt7P z004$kiIR$L!NG3r3pq_C!l>$s=<+Nif;*PV1Xucr)z$I7RWi<7X6j}Hc&>YD8W-Z~ zXQ%FRDfdg`Neq=}X0~}%zdiF2J@2X`8JLY1V!Dii(A>urK;0D=Ud#wDNEkxc_6L#BH=6Y+}8*=O;xPcTsyfM z$-C~j`7%k;5CDp9rmkI^T+-tkdy@Caz%AGU)D-@6kLB!q!~Es%d{^P zr{IN&8(-3(WHF0>D0s4(IKJ(`k`jw#4PCX!Jv~k#cqvz}ojbi;B=DUx(#t&eIRZLX zW$M#6#c3Y)KD8XQt|)@R;TmprTjaSO03KZt>H>fxsRr!zG}G78)F17#-CvVXbM{1P z`wDqigQ=QM*2_m0#?rgG7vH;$kW{uUu~b!%S5Y4_Zqis`f~FilRY@FvXxq|}!!$JY zMmcZu8%C%&b^L`ezCFXp3yVxCo3qPrnYG0*O;sHuvxS~}kNV6PCho%%H;Gc?_y1yJ zpshY~oaMH|-tBKkc`<%38M410*kWm7pe#Q~YnY*ptCy=mhaOB*S~_!#kM-L@?(lt4Axwbg`c(h8PfM3=&{QDj ze|YV?E-cydq58 z+N|i!$IxZglQ!(1TW!c zsq!i~PUK2{Y`(EP3w|mT9W?d9(s=PH3slp|59!stCM@3HjeZ{IUd`&MMw z)zBQ2CT}unj=6z!&XY0#P#o{I!G2J5WK_ia98`Sp9QTzw{MFsucJrsRsZF#nmLU_^ zlx_nk67gyNyTgj>`6cD`O~P0a9Cf|lZtc?hM}5v$f%LQ`t9Sbi@>qR{7gwaJF!}}} z)gU}7%0XYcdow~%6l?ojK#{kj)9JQyoqsS1RWCZ7F5PiD2ZE!}>GXy2-T%5hTjk9* zM~0t}A+$7zBgzGaU-TL+Cu&s~eF6>u6wK|>x@VE;)!kP?n@d<6{vLrUj-s4gW^?zI zJGD+!1b{py2LS0hrK)GEw%yR`jC1@Y8(en9xvU!9xkE&)3ZqXT0D!_oh5Aod?RM>9o$q|{PID}nah8-AC=(5C{mI#Lx!6zbeZw|ito#Mp{AhVNs0h4>t5z|b@Y|X-vNbvTZ-3&~Gum=^yMZhKr2KjE_@!5$ZLcHj#>|U1uYdeI z@nu#CRaRxn+||yT{JHB^#1%CNw32ZMhsgy%hHA*kq1p%lm&pNKhxMzXP=(QFm>oPD z65v8@xA4Yj^^uU19VhM}I5Db}hQ6_rm;d?0o0YmOJ?M5c(;0-g<=lni8x4f9+64sr zI}Zf_yqKJ<7#;w0R~$ZnY<7RE!uTq108sIw3L)UzfA=m=t0s`uJ5)rutcIGr^pvne zo8C(qc`ej}uK;ByGuRZR&#Y+cXnmi}kQt>10323DC5r<9`i9cA@3Z?`6~a(jKMXd^>Papt5W5vyL&u6Xl*@Ol}yen=PI?md2q%?i&0{{R(Tz~h~ zEqrt}?tb>CDw3p<`7Gzrl%``*xjcUyQA$pl1OQZ7G62ZQ%M&>$m&>fEU;yCUclfB~ z+`D`;DX)|vsh~B(ewk8p?$#LI%I==6z{m@Z%N@VXXVsCDF%^iMoyXe7>>J?)bs|=U z(Koa$RGMnPY_iF4bp=XM-uoNjXYZ%COf|$)lxNMi8*gT$EGOMuS6P_-_69xlNlwc; zTDg%sPHrF3sZmzVL#GwT0DwSMoxQ+zys43*tQ4!JBr7#3GU8euqvhGHXDa~UNy-aX zF1Iw*r=SgQlkc28MK57 + + + + CTF Writeup - Finland + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
+ +
+ +
+
+ +
+
CTF Writeups - Finland
+
+ + + +
+
+ +
+
+
+ + + +
+
+


+ Points: 150
+ Description: Consider the format: "< message > + < random number >". For example: "hello+453" has its SHA256 hash as:
+
+ 24ea0ded1e01de0861bfaaace9bbfb48922f96f4e023ca637ee5cb1b29e9db7f
+
+ Where hello is message, plus (+) is the delimiter & 453 is a random number.
+
+ Find the smallest positive integer such that the SHA256 hash of the message "catch-me-if-you-can" represented in the given format has eight zeros as its first 8 characters.
+
+ Note:
+ 1. The hash presented for "hello+453" has "24e" as the first 3 characters.
+ 2. There are no quotes in the format, they are just to highlight the strings.
+
+ Example:
+
+ With the random number 453, the hash of the given message: "catch-me-if-you-can" (i.e. catch-me-if-you-can+453) in the specified format is:
+
+ a84f4f32f3ba9b2f1e402e248f9d27239875a752114405b94e6e570a29c1073e +

+
+ + +
+

Links and Hints

+

:)

+
+ + +
+

Recon

+

From the question, we can understand that we need to find the smallest positive integer such that the SHA256 hash of the message "catch-me-if-you-can" represented in the given format has eight zeros as its first 8 characters.
+

+
+ +
+

Finding the Flag

+

So we wrote a python script while add number form 0 to infinity and check if the hash has 8 zeros as its first 8 characters.

+
+ +
+ 
+        import hashlib
+        
+        string = 'catch-me-if-you-can+'
+        number = 0
+        
+        while True:
+            number = number + 1
+            hash =  hashlib.sha256(f'{string}{number}'.encode()).hexdigest()
+            if '00000000'in hash
+                print(number)
+                break
+
+ Download Code +
+ +
+

After burning GPU for a decade we found it😢...!

+ +

Flag

+ muctf{catch-me-if-you-can+631550315}


+
+
+ +
+ + + +
+
+ + + + +
+
+ Copyright © Team Faux - All rights reserved +
+
+ + + From eb7e4104ff07d93ef6f81f88ab42ef7661cf8e63 Mon Sep 17 00:00:00 2001 From: MQ Date: Fri, 27 Aug 2021 16:53:23 +0530 Subject: [PATCH 2/2] Kazakhstan --- writeups/Mu-Onam-CTF/Finland/index.html | 4 +- .../Kazakhstan/img/Kazakhstan0.png | Bin 0 -> 1472 bytes .../Kazakhstan/img/Kazakhstan1.png | Bin 0 -> 1461 bytes .../Kazakhstan/img/Kazakhstan2.png | Bin 0 -> 324315 bytes writeups/Mu-Onam-CTF/Kazakhstan/index.html | 138 ++++++++++++++++++ 5 files changed, 140 insertions(+), 2 deletions(-) create mode 100644 writeups/Mu-Onam-CTF/Kazakhstan/img/Kazakhstan0.png create mode 100644 writeups/Mu-Onam-CTF/Kazakhstan/img/Kazakhstan1.png create mode 100644 writeups/Mu-Onam-CTF/Kazakhstan/img/Kazakhstan2.png create mode 100644 writeups/Mu-Onam-CTF/Kazakhstan/index.html diff --git a/writeups/Mu-Onam-CTF/Finland/index.html b/writeups/Mu-Onam-CTF/Finland/index.html index 824c7c7..23d5149 100644 --- a/writeups/Mu-Onam-CTF/Finland/index.html +++ b/writeups/Mu-Onam-CTF/Finland/index.html @@ -27,7 +27,7 @@ eg:- TO --> - + + + + + + + + + + +
+ +
+ +
+
+ +
+
CTF Writeups - Kazakhstan
+
+ + + +
+
+ +
+
+
+ + + +
+
+


+ Points: 150
+ Description: He did something he shouldn't have. We arrested him but need proof !!! +

+
+ + +
+

Files and Hints

+ + 7zip file [https://mega.nz/file/2rAEyRCY#jUT_52h4GgW7_SHihVNTFyEDEGcUpv5Z0akE96il4I4] + +
+ + +
+

Recon

+

The challenge had a 7zip file of size 473.8 MiB.

+ +

By unzipping it we get a 2.0 GiB row file.

+ + +
+ +
+

Finding the Flag

+

As usual, we just tried strings because it's a file. and we found many sentences are passing.

+ strings -10 file.raw + +

oh it huge lets try luck 👀. so tried a filtering with grep to check it contain "muctf{" which is the starting formate of our ctf

+ strings -10 file.raw | grep "muctf{" +

BOOM BOOM THE FLAG 😂😂!

+ + +

Flag

+

muctf{MemdUmPIIsHeREee}

+ +

PRO TIP : strings everything

+
+ +
+ + + +
+
+ + + + +
+
+ Copyright © Team Faux - All rights reserved +
+ +
+ + + + + + + + + + + + +