writeup – devel0pment.de

1. January 20194. January 2019

HACKvent18 writeup

For the sixth time in a row now hacking-lab.com carried out the annual HACKvent. Each day from the 1st of december until the 24th a new challenge is published. I would have loved to spend more time on it, but time is a rare resource especially on the days before christmas 😉 After all I managed to solve 21 of 24 tasks:

	Easy
Day 01: Just Another Bar Code Day 02: Me Day 03: Catch me Day 04: pirating like in the 90ies Day 05: OSINT 1 Day 06: Mondrian Day 07: flappy.pl
	Medium
Day 08: Advent Snail Day 09: fake xmass balls Day 10: >_ Run, Node, Run Day 11: Crypt-o-Math 3.0 Day 12: SmartWishList Day 13: flappy’s revenge Day 14: power in the shell
	Hard
Day 15: Watch Me Day 16: Pay 100 Bitcoins Day 17: Faster KEy Exchange Day 18: Be Evil Day 19: PromoCode Day 20: I want to play a game Day 21: muffinCTF (Day 1) Day 22: muffinCTF (Day 2) Day 23: muffinCTF (Day 3)
	Final
Day 24: Take the red pill, take the blue pill

Continue reading “HACKvent18 writeup”

22. May 2018

Hacky Easter 2018 writeup

As every year hacking-lab.com carried out the annual Hacky Easter event with 27 challenges. I could not spend as much time as I would have liked to on solving the challenges, but after all I managed to collect 25 of the 27 eggs and focused on this writeup.

	Easy
01 Prison Break 02 Babylon 03 Pony Coder 04 Memeory 05 Sloppy & Paste (mobile) 06 Cooking for Hackers 07 Jigsaw 08 Disco Egg 09 Dial Trial (mobile)
	Medium
10 Level Two 11 De Egg you must (not solved) 12 Patience (mobile) 13 Sagittarius… 14 Same same… 15 Manila greetings 16 git cloak –hard 17 Space Invaders 18 Egg Factory
	Hard
19 Virtual Hen 20 Artist: No Name Yet (not solved) 21 Hot Dog 22 Block Jane 23 Rapbid Learning 24 ELF
	Hidden
25 Hidden Egg #1 26 Hidden Egg #2 27 Hidden Egg #3

Continue reading “Hacky Easter 2018 writeup”

21. May 201822. May 2018

RCTF 2018 – writeup cpushop

The RCTF 2018 (ctftime.org) ran from 19/05/2018, 09:00 UTC to 21/05/2018 08:59 UTC.

I wrote the following writeup for the crypto challenge cpushop.

Continue reading “RCTF 2018 – writeup cpushop”

21. March 20183. January 2019

angstromCTF 2018 – writeup hellcode

The angstromCTF 2018 (ctftime.org) ran from 16/03/2018, 20:00 UTC to 23/03/2018 00:00 UTC.

As the description on ctftime.org states, the ctf is primarily geared towards high school students but with a very wide range of challenge difficulty.

There have been a lot of interesting challenges which have been fun to do. I decided to make a writeup for the pwn challenge hellcode.

Continue reading “angstromCTF 2018 – writeup hellcode”

10. March 201820. May 2018

RPISEC/MBE: writeup lab09 (C++)

In the last lab we focused on Misc and Stack Cookies. In this next to last lab some characteristics when dealing with C++ are introduced.

The lab contains only two levels:
–> lab9C
–> lab9A

Continue reading “RPISEC/MBE: writeup lab09 (C++)”

2. March 201820. May 2018

RPISEC/MBE: writeup lab08 (Misc and Stack Cookies)

While the last lab introduced the subject of Heap Exploitation, this lab focuses on Misc and Stack Cookies.

The lab contains three levels again ranging from C to A:
–> lab8C
–> lab8B
–> lab8A

Continue reading “RPISEC/MBE: writeup lab08 (Misc and Stack Cookies)”

26. February 201820. May 2018

TAMUctf 18 – writeup pwn1-5

The Texas A&M University CTF (ctftime.org) ran for over one week from 17/02/2018, 00:00 UTC to 26/02/2018 00:00 UTC. There have been a lot of challenges starting at a very easy difficulty.

I did the five pwn challenges ranging from 25 to 200 points:
–> pwn1 (25 pts)
–> pwn2 (50 pts)
–> pwn3 (75 pts)
–> pwn4 (125 pts)
–> pwn5 (200 pts)

Continue reading “TAMUctf 18 – writeup pwn1-5”

23. February 201820. May 2018

RPISEC/MBE: writeup lab07 (Heap Exploitation)

After we have introduced ASLR and ways to bypass it in the last writeup, we will expand our exploits to the Heap in this lab.

In this lab there are only two levels:
–> lab7C
–> lab7A

Continue reading “RPISEC/MBE: writeup lab07 (Heap Exploitation)”

16. February 201820. May 2018

RPISEC/MBE: writeup lab06 (ASLR)

The previous lab focused on the subject of return oriented programming in order to circumvent data execution prevention. The next lab described in this writeup introduces ASLR.

The single levels of this lab range from C to A:
–> lab6C
–> lab6B
–> lab6A

Note: ASLR should be enabled by now.

Continue reading “RPISEC/MBE: writeup lab06 (ASLR)”

9. February 201820. May 2018

RPISEC/MBE: writeup lab05 (DEP and ROP)

In the last writeup we used different format string vulnerabilites in order to exploit the provided binaries. This writeup continues with lab05 which introduces DEP and ROP.

As usual there are three levels ranging from C to A:
–> lab5C
–> lab5B
–> lab5A

Continue reading “RPISEC/MBE: writeup lab05 (DEP and ROP)”