p4-team/ctf

Ctf solutions from p4 team

ctf's Issues

Padding oracle CBC

This of course won't let us recover the first block, but this can't be helped.

Usually the fist block of cypher text is IV, so the algorithm can recover the first block of plain text too, if it doesn't exceed the maximum length of padding.

ccls-fringe

May I ask how did you call ccls::Deserialize in main? What compile options did you use to link against ccls?

Złe opisy w trivia

5 to na pewno nie race condition a chyba dll hijack

random_noise

From sorted.png how I can filter this image with the original image to get the final Image?
Thank You for your help.

Writeup for "Election department service" in CTFZone

Hi, will you post a writeup for the pwn challenge Election department service in CTFZone 2017 last weekend?

CTFZone - Ghost in the shell Second track

Hi, thank for your writeup but I have a small issue that how can I extract the second track from the video? I tried export audio in Audacity but it didn't work.

testing the challenge locally

This issue is not directly about the challenge but rather on how to test the binary locally. I added -debug to the script as mentioned in the docs, but I run into this error : legacy bitmap isn't available. Btw, even with the original script, I ran into the same error so I wasn;t able to test the challenge locally. I have contacted the author of the challenge but I haven't received a response. Also, there's nothing on the net that shows a similar issue when running the sde simulator.

bookhub--The real world ctf

thank you for your writeup,But I am confused about this ,in the writeup of bookhub of the real world ctf,the author said:"We have the local debug environment so we could create a user, login and then check what is stored in Redis for his session. " I don't understand what does this mean,cause no url in views/user.py has the function of registering or adding user,and the redis server is local service,can't access remote.

Link to solver broken

I read through this writeup: https://github.com/p4-team/ctf/tree/master/2017-04-21-plaidctf/multicast

And the link to the solver returns a 404.

Otherwise great writeup.

Osiris write-up

Hi!
In the OSIRIS write-up https://github.com/p4-team/ctf/tree/master/2018-05-31-securityfest/osiris you say you don't know the specific EBCDIC encoding. I lost the code I used to generate the challenge in a reboot. I thought I had used EBCDIC 278 (as it was the most logical course of action) but it seems I used EBCDIC 284, you can guess why ;)

Just for completeness of the write-up. Thanks for sharing it :)

I wonder how zer0lfsr work

if there's only one lfsr, it is not hard to understand how z3 break the encryption.but why when the 3 lfsr combine, it still works? how can z3 do that? What algorithm is used? i would be grateful if you can solve my doubts.

Twitter account maybe? :)

Czesc,

Dalibyscie rade zalozyc jakies konto na Twitterze, co by bylo latwiej za Wami podazac? :)
Lubie Wasze writeupy :)

Pozdrawiam i gratuluje swietnych wynikow w CTF-ach!

bl4de
https://twitter.com/_bl4de