ASIS Quals 2014 Trivia-50 [ Image ]

Sorry, Been long time writing writeups. Exams and project work.Well, had no time for ASIS also.pwned only 1 challenge.Next is defcon and i promise ill write more writeups.Stay updated.

Question : Find the flag.
Description : File


Solution :

Step 1 : Download the file joy_50_25b927e48a23a4b41f215303ca988a01

Step 2 : using " http://mark0.net/onlinetrid.aspx " find the file type.

Step 3 : using 7zip software we can extract .xz as it is one of the compression algorithms like .zip or .tar etc.

Step 4 : repeat step 2 and step 4 as its double packed (.xz + .tar).

Step 5 : repeat step 2 and see that its a .NES file which is Nintendo entertainment system file.For more info see the wiki page

Step 6 : Find a appropriate emulator to run the game. I used fceux emulator . find it here " http://www.fceux.com/web/download.html "

Step 7 : Play the game and pass the level 1 to get the flag in level 2

Step 8 : You see this in level 2 " Flag : 8 BIT RULES"

Admins had posted to ping about this question.They told that the flag is actually 8BIT_RULEZ if you had got till here correctly.

FLAG : 8BIT_RULEZ

NOTE : you actually don't have to play the game.Start with stage 1 and press F10 you would see this saved state :-)  . Dont know how many found this , but this is an easier way of it :-D

Backdoor CTF 2014 Hidden challenge

Was fun playing this CTF.I gathered oly 1 hidden flag which was hidden in the css file.There were around 6 according to admins and few players.I searched almost everythng i knew and finally got this.

so the flag was md5("hashme") => 533f6357e0210e67d91f651bc49e1278

FLAG : 533f6357e0210e67d91f651bc49e1278

Backdoor CTF 2014 [All trivia]

Submit flag as md5 of answer. Answer consists of small alphabets (a-z) only. [Applies to all trivia]

Trivia 1 - http://opensource.apple.com/source/Security/Security-55471/libsecurity_ssl/lib/sslKeyExchange.c?txt

This above link was given .
Quick google about the link showed it was ios-Apple"gotofail" security bug.
md5("gotofail") => 9c00b580a9a1d022d62fa3e8506c3c51

FLAG : 9c00b580a9a1d022d62fa3e8506c3c51

Trivia-2
Who is Megaracer?

Again Googling revealed Megaracer aka kimdotcom
md5("Who is Megaracer?") => 148e6711a03f43a1955bcff667d967cc

FLAG : 148e6711a03f43a1955bcff667d967cc

Trivia-3
"How I hacked github again". Where am I now?

Google helped to find me the blog of Egor Homkov : http://homakov.blogspot.in/p/about-me.html
We now know that he is in bangkok..Country is Thailand
md5("thailand") => 8689391a8b93cd2d55ccf3f436eef4e2

FLAG : 8689391a8b93cd2d55ccf3f436eef4e2

Trivia-4
http://fortunebrainstormtech.files.wordpress.com/2014/03/140319073410-ted-2014-edward-snowden-620xa.png?w=620

This image is about the ted talk to a robot resembling snowden called "beam"
md5("beam") => 5435eeb714f3a0739ca75b3b0eb8cfb3

FLAG : 5435eeb714f3a0739ca75b3b0eb8cfb3

Trivia-5
Trivia 21?

This was the question ,something worth thinking.
Anyway it was about the port 21,even i thought in the beginning as blackjack but wasn't the answer.
md5("ftp") => ff104b2dfab9fe8c0676587292a636d3

FLAG : ff104b2dfab9fe8c0676587292a636d3

Nullcon HackIm 2014 trivia Challenges

Well, had a nice weekend..probably best.I felt world never existed around me.2 CTF's.
Lets get back to what happened and discuss how to solve it.
Trivia was easy enough so let me begin with that.

Question 1 : This esoteric programming language uses AWSUM THX and O NOES as error handling.

Flag : LOLCODE

Simple google or copy paste the question first result you get it.

Question 2 : What software is used to hack into ENCOM's computer system?

Flag : CLU

website : en.wikipedia.org/wiki/Tron

Question 3 : Outcome of Stealth Project to make coffee.

Flag : Java

website : www.sis.pitt.edu/~icucart/fshi/java_introduction.html‎