Web Application Challenge 1
-Through some manipulation or interpretation of this CGI script - and the HTML page(s) that it generates, a 10 character key can be - found.
-Find the key!
-- Alice
- e3 75 ff 47 8e 96 a3 b 46 47 76 af a9 4 d6 13 99 65 79 d7 bd 3f 3a 5e f1
c4 29 f5 c 45 74 77 b6 84 4c dd 9 38 9c f6 bf a6 d6 ef 11 b5 22 b7 f7 b7
2 65 6b 84 7 3e 76 68 e3 d6 9b 3e 8a 95 92 a1 e6 a6 f9 a0 e4 ae aa a8 ab
bd ef fe b3 b2 b5 f0 b6 ae ee f0 e5 c3 ed ab e1 ef ee de b6 a0 f3 ec a2 a2
aa a9 a0 ae aa f8 fe a8 b7 aa aa ab bb f8 bb e2 b1 b0 ed b2 e7 ee f9 b7 ac
a0 bc a4 - - Bob
- bb 29 86 18 a7 e0 a6 33 ec bc df 73 3e b5 dc 76 66 6d 74 68 30 81 9b 42 a1
41 ac 3b ee ab 3d ae d4 ae d0 33 d9 11 1 e4 57 3f 61 14 9b e2 85 f5 89 e0
cf 94 d8 56 71 a ec 99 7a 5d 4 7e 68 93
- Alice
- ', crypto.hexFormat(c)) -assert cbc.cipherBlockChainingD(aliceKey, IV, C, c) == alice -c = cbc.cipherBlockChainingE(bobKey, IV, C, bob) -assert cbc.cipherBlockChainingD(bobKey, IV, C, c) == bob -print('
- Bob
- ', crypto.hexFormat(c), '
- Alice
- f4 c9 40 41 ac 4b 9c 3f 32 58 2f 70 1c 49 fb bf a8 56 72 72 2 88 2c 87 cc
d 13 6c 25 d5 da 30 64 dd dd b8 ba 58 c1 a3 17 26 6d ff 64 62 cb 69 b3 e2
ae 2d dd 11 2f a1 5d 79 b6 63 cb 51 5b de 9c 57 20 45 72 7b f2 35 15 40 60
8c 45 c9 a6 38 e0 79 7 a4 cc 18 e9 7e eb 4b 38 e2 ed 6b 17 a1 ee fd 69 2a
24 b5 21 be 96 92 d4 f6 5b 40 59 1d b f6 8a cb dd 6 43 16 6 f ab c8 4
fc b2 f3 c3 64 11 40 db 9e d6 7 f9 40 17 bd 2 1e cc b2 14 81 6a c1 6b b9
2c 6c ab 5f 7f - - Bob
- e9 d5 6 46 ac 52 92 38 32 5d 32 37 59 10 e3 af a8 46 72 6b 18 89 68 c2 c0
15 13 2f 3d 94 d0 2b 31 9e db ae ea 5f c1 ef 11 36 37 e4 66 7e 9e 21 99 e3
a7 6a ce 13 2f a1 50 74 ae 73 84 5b 41 96 da 1e a 10 76 60 a2 39 5b 19 6e
d9 1 da ba 75 ac 71 1b b5 89 1e a1 7e f3 b 36 ab a3 6b 43 e9 ab fd 23 75
68 f6 68 b3 c8 dc 81 ae b 18 44 4f 50 eb aa cb d5 6 4f 16 a 49 b0 d2 41
df bb 93 cd 7d d 42 c6 cc 8d 1a b0 f 43 f6 46 52 8d bf 5d c5 21 8a 22 fa
79 20 ff 6 71
- Alice
- ', format(c)) - assert decode(c) == alice - c = encode(bob) - print('
- Bob
- ', format(c), '
') - elif i % 5 == 4: - out.append(' ') - - i = i + 1 - - return ''.join(out) - -def strip(text): - """Strip any unicode from the given text, and return it as a bytes - object.""" - - b = bytearray() - for t in text: - if ord(t) > 255: - t = ' ' - - b.append(ord(t)) - - return bytes(b) diff --git a/puzzles/crypto/diffie.py b/puzzles/crypto/diffie.py deleted file mode 100644 index 5f0bbba..0000000 --- a/puzzles/crypto/diffie.py +++ /dev/null @@ -1,8 +0,0 @@ -prime = 51237129793 -mod = 321454621 -a = 341 -A = prime ** a % mod -b = 573 -B = prime ** b % mod -key = A**b % mod -assert B**a % mod == key, 'Bad diffie math.' diff --git a/puzzles/crypto/transform.py b/puzzles/crypto/transform.py deleted file mode 100644 index d9ffe1b..0000000 --- a/puzzles/crypto/transform.py +++ /dev/null @@ -1,13 +0,0 @@ -def transform(text, map): - size = len(map) - div = len(text) % size - assert div == 0, 'Text must be a multiple of the key size in length. '\ - 'At %d out of %d' % (div, size) - - out = bytearray() - i = 0 - while i < len(text): - for j in range(size): - out.append( text[i + map[j]] ) - i = i+size - return bytes(out) diff --git a/puzzles/forensics/10/index.html b/puzzles/forensics/10/index.html deleted file mode 100755 index 5b442e2..0000000 --- a/puzzles/forensics/10/index.html +++ /dev/null @@ -1,13 +0,0 @@ - -You have suspicions that a certain windows box has been infected by a Trojan. You have been given access to a memory image from this box.xp-laptop-2005-06-25.img Use the memory image to determine if the machine has been infected. - -In order to answer the questions: - - - Determine if the machine has been infected. - - - If it has not been infected, list "no" as your answer. - - - If it has been infected, list the process name of the Trojan - -HINT: You know from googling that the Trojan uses the passWD.log file. - diff --git a/puzzles/forensics/10/key b/puzzles/forensics/10/key deleted file mode 100755 index 97d62ab..0000000 --- a/puzzles/forensics/10/key +++ /dev/null @@ -1 +0,0 @@ -lsass.exe diff --git a/puzzles/forensics/100/index.html b/puzzles/forensics/100/index.html deleted file mode 100755 index bd74257..0000000 --- a/puzzles/forensics/100/index.html +++ /dev/null @@ -1,2 +0,0 @@ -What is the method of attack? -image file \ No newline at end of file diff --git a/puzzles/forensics/100/key b/puzzles/forensics/100/key deleted file mode 100755 index 30383c8..0000000 --- a/puzzles/forensics/100/key +++ /dev/null @@ -1 +0,0 @@ -dll injection \ No newline at end of file diff --git a/puzzles/forensics/20/index.html b/puzzles/forensics/20/index.html deleted file mode 100755 index 94c6203..0000000 --- a/puzzles/forensics/20/index.html +++ /dev/null @@ -1,15 +0,0 @@ - - -You are currently employed as a SW engineer at KELCY INC. One of your clients has informed you that $10,000 has been deducted from their accounts from an authorized user. They have delivered a software image for you to investigate. Determine if the machine has been compromised. - -In order to answer the questions: - - - Determine if the machine has been compromised. - - - If it has not been compromised, list "no" as your answer. - - - If it has been compromised, list the file name (with its extension) being used by the malicious software - -winxppro.vmem - - diff --git a/puzzles/forensics/20/key b/puzzles/forensics/20/key deleted file mode 100755 index 8c72a46..0000000 --- a/puzzles/forensics/20/key +++ /dev/null @@ -1 +0,0 @@ -klog.txt diff --git a/puzzles/forensics/200/index.html b/puzzles/forensics/200/index.html deleted file mode 100755 index e137f68..0000000 --- a/puzzles/forensics/200/index.html +++ /dev/null @@ -1,2 +0,0 @@ -What is the name of what was injected? -image file \ No newline at end of file diff --git a/puzzles/forensics/200/key b/puzzles/forensics/200/key deleted file mode 100755 index bda2bd0..0000000 --- a/puzzles/forensics/200/key +++ /dev/null @@ -1 +0,0 @@ -winsecur.dll \ No newline at end of file diff --git a/puzzles/forensics/250/index.html b/puzzles/forensics/250/index.html deleted file mode 100755 index 9937b0b..0000000 --- a/puzzles/forensics/250/index.html +++ /dev/null @@ -1,10 +0,0 @@ -SA Dumas from the Albuquerque FBI Cyber Squad has alerted you that Antoniette Balls (Iranian postdoc with a username of "aballs@tipmeover.org") working at the lab has been in contact with Iranian Jihad organization. Find the code that she is transmitting to the Iranian Jihad Organization. -AD database -
-
-To: Help Desk, -Subject: Here is the .dit file for the domain controller as requested. Let me know if you need anything else. - -Ask for Gary: -505.452.6718 -505.280.8668 \ No newline at end of file diff --git a/puzzles/forensics/250/key b/puzzles/forensics/250/key deleted file mode 100755 index 3d9c36f..0000000 --- a/puzzles/forensics/250/key +++ /dev/null @@ -1 +0,0 @@ -Dirka Dirka \ No newline at end of file diff --git a/puzzles/forensics/400/index.html b/puzzles/forensics/400/index.html deleted file mode 100755 index 39c5b98..0000000 --- a/puzzles/forensics/400/index.html +++ /dev/null @@ -1,12 +0,0 @@ - -Determine which file has been winrared in this archive. - - -In order to answer the questions: - - - List the file name (including extension) of the file that has been winrared - -image file -rar file - - diff --git a/puzzles/forensics/400/key b/puzzles/forensics/400/key deleted file mode 100755 index 9ab5189..0000000 --- a/puzzles/forensics/400/key +++ /dev/null @@ -1 +0,0 @@ -avatar.txt diff --git a/puzzles/forensics/50/index.html b/puzzles/forensics/50/index.html deleted file mode 100755 index a79d0e8..0000000 --- a/puzzles/forensics/50/index.html +++ /dev/null @@ -1,11 +0,0 @@ - -You know that a machine has been comprimised. There is a malicious piece of software that logs all key strokes from a computer's keyboard. Find the driver associated with the malicious piece of software. - - -In order to answer the questions: - - - List the driver name with its full path - -winxppro.vmem - - diff --git a/puzzles/forensics/50/key b/puzzles/forensics/50/key deleted file mode 100755 index d4e3038..0000000 --- a/puzzles/forensics/50/key +++ /dev/null @@ -1 +0,0 @@ -C:\WINDOWS\system32\klog.sys diff --git a/puzzles/hackme/100/index.mdwn b/puzzles/hackme/100/index.mdwn deleted file mode 100644 index b99f752..0000000 --- a/puzzles/hackme/100/index.mdwn +++ /dev/null @@ -1 +0,0 @@ -There is no key. It is impossible to score 100 points in this category. diff --git a/puzzles/hackme/200/index.mdwn b/puzzles/hackme/200/index.mdwn deleted file mode 100644 index b4b4218..0000000 --- a/puzzles/hackme/200/index.mdwn +++ /dev/null @@ -1,3 +0,0 @@ -The key is "james". Should you claim your points immediately, though? -Go ahead, watch what happens when you do. - diff --git a/puzzles/hackme/200/key b/puzzles/hackme/200/key deleted file mode 100644 index dc065e0..0000000 --- a/puzzles/hackme/200/key +++ /dev/null @@ -1 +0,0 @@ -james diff --git a/puzzles/hackme/274/index.mdwn b/puzzles/hackme/274/index.mdwn deleted file mode 100644 index 72dd672..0000000 --- a/puzzles/hackme/274/index.mdwn +++ /dev/null @@ -1,2 +0,0 @@ -So was it a good idea to claim your points as soon as possible? -Watch the scoreboard. diff --git a/puzzles/hackme/300/index.mdwn b/puzzles/hackme/300/index.mdwn deleted file mode 100644 index bcb3c57..0000000 --- a/puzzles/hackme/300/index.mdwn +++ /dev/null @@ -1 +0,0 @@ -You're going to have to work harder now. diff --git a/puzzles/hackme/614/index.mdwn b/puzzles/hackme/614/index.mdwn deleted file mode 100644 index dc065e0..0000000 --- a/puzzles/hackme/614/index.mdwn +++ /dev/null @@ -1 +0,0 @@ -james diff --git a/puzzles/hackme/614/key b/puzzles/hackme/614/key deleted file mode 100644 index dc065e0..0000000 --- a/puzzles/hackme/614/key +++ /dev/null @@ -1 +0,0 @@ -james diff --git a/puzzles/hackme/806/index.mdwn b/puzzles/hackme/806/index.mdwn deleted file mode 100644 index dd3d17d..0000000 --- a/puzzles/hackme/806/index.mdwn +++ /dev/null @@ -1 +0,0 @@ -That's all, folks. diff --git a/puzzles/hackme/806/key b/puzzles/hackme/806/key deleted file mode 100644 index dd3d17d..0000000 --- a/puzzles/hackme/806/key +++ /dev/null @@ -1 +0,0 @@ -That's all, folks. diff --git a/puzzles/hackme/summary.txt b/puzzles/hackme/summary.txt deleted file mode 100644 index e69de29..0000000 diff --git a/puzzles/hispaniola/10/img.png b/puzzles/hispaniola/10/img.png deleted file mode 100644 index 2d4e686..0000000 Binary files a/puzzles/hispaniola/10/img.png and /dev/null differ diff --git a/puzzles/hispaniola/10/index.mdwn b/puzzles/hispaniola/10/index.mdwn deleted file mode 100644 index 2c21f28..0000000 --- a/puzzles/hispaniola/10/index.mdwn +++ /dev/null @@ -1 +0,0 @@ -
diff --git a/puzzles/hispaniola/10/key b/puzzles/hispaniola/10/key
deleted file mode 100644
index 071491e..0000000
--- a/puzzles/hispaniola/10/key
+++ /dev/null
@@ -1 +0,0 @@
-You're well on your way :)
diff --git a/puzzles/hispaniola/125/index.mdwn b/puzzles/hispaniola/125/index.mdwn
deleted file mode 100644
index 90ccc06..0000000
--- a/puzzles/hispaniola/125/index.mdwn
+++ /dev/null
@@ -1 +0,0 @@
-Puzzle: Braille
diff --git a/puzzles/hispaniola/125/key b/puzzles/hispaniola/125/key
deleted file mode 100644
index 6c456ba..0000000
--- a/puzzles/hispaniola/125/key
+++ /dev/null
@@ -1 +0,0 @@
-‽
diff --git a/puzzles/hispaniola/15/img.png b/puzzles/hispaniola/15/img.png
deleted file mode 100644
index ea2737b..0000000
Binary files a/puzzles/hispaniola/15/img.png and /dev/null differ
diff --git a/puzzles/hispaniola/15/index.mdwn b/puzzles/hispaniola/15/index.mdwn
deleted file mode 100644
index 067714f..0000000
--- a/puzzles/hispaniola/15/index.mdwn
+++ /dev/null
@@ -1 +0,0 @@
-
diff --git a/puzzles/hispaniola/15/key b/puzzles/hispaniola/15/key
deleted file mode 100644
index 1941358..0000000
--- a/puzzles/hispaniola/15/key
+++ /dev/null
@@ -1 +0,0 @@
--462766
diff --git a/puzzles/hispaniola/5/img.png b/puzzles/hispaniola/5/img.png
deleted file mode 100644
index ad0dbc9..0000000
Binary files a/puzzles/hispaniola/5/img.png and /dev/null differ
diff --git a/puzzles/hispaniola/5/index.mdwn b/puzzles/hispaniola/5/index.mdwn
deleted file mode 100644
index 7e4e1e7..0000000
--- a/puzzles/hispaniola/5/index.mdwn
+++ /dev/null
@@ -1 +0,0 @@
-
diff --git a/puzzles/hispaniola/5/key b/puzzles/hispaniola/5/key
deleted file mode 100644
index 9b8d504..0000000
--- a/puzzles/hispaniola/5/key
+++ /dev/null
@@ -1 +0,0 @@
-3acd767f2717b84076cdcd18e882f01d
diff --git a/puzzles/hispaniola/50/index.mdwn b/puzzles/hispaniola/50/index.mdwn
deleted file mode 100644
index 45484e9..0000000
--- a/puzzles/hispaniola/50/index.mdwn
+++ /dev/null
@@ -1,9 +0,0 @@
-Little-known fact is that the-Answer is right here.
-Now all you have to do is
-Look around and you'll know where you need to
- -Go. You can't continue
-Unless you determine this key.
-You'll need to enter it here and
-Speak it to obtain the next item in the treasure hunt.
diff --git a/puzzles/hispaniola/50/key b/puzzles/hispaniola/50/key deleted file mode 100644 index c1783d9..0000000 --- a/puzzles/hispaniola/50/key +++ /dev/null @@ -1 +0,0 @@ -LANL GUYS diff --git a/puzzles/hispaniola/75/index.mdwn b/puzzles/hispaniola/75/index.mdwn deleted file mode 100644 index dc8e55c..0000000 --- a/puzzles/hispaniola/75/index.mdwn +++ /dev/null @@ -1,3 +0,0 @@ -Give the entire sequence. The symbols are here, in no particular order, for you to copy and paste.
-Make sure to include spaces between symbols (but no leading or trailing spaces).
-◕ ⚑ ♥ ◢ ★ diff --git a/puzzles/hispaniola/75/key b/puzzles/hispaniola/75/key deleted file mode 100644 index 576d8a7..0000000 --- a/puzzles/hispaniola/75/key +++ /dev/null @@ -1 +0,0 @@ -⚑ ◢ ◕ ★ ♥ ◢ ♥ ⚑ ◕ ★ ♥ ◕ ★ ♥ ⚑ ★ ⚑ ◢ ♥ ◢ ◕ ◕ ◢ ★ ⚑ diff --git a/puzzles/hispaniola/summary.txt b/puzzles/hispaniola/summary.txt deleted file mode 100644 index 77d99e7..0000000 --- a/puzzles/hispaniola/summary.txt +++ /dev/null @@ -1 +0,0 @@ -The "hispaniola" category requires contenstants to treasure-hunt for tangible items to learn the keys to each puzzle. diff --git a/puzzles/net-re/.gitignore b/puzzles/net-re/.gitignore deleted file mode 100644 index b25c15b..0000000 --- a/puzzles/net-re/.gitignore +++ /dev/null @@ -1 +0,0 @@ -*~ diff --git a/puzzles/net-re/1/index.mdwn b/puzzles/net-re/1/index.mdwn deleted file mode 100644 index cc40c76..0000000 --- a/puzzles/net-re/1/index.mdwn +++ /dev/null @@ -1,95 +0,0 @@ -Decimal -======= - -Decimal (Greek “deca-”, meaning “ten”), or base ten, is the counting -system most people use regularly, consisting of ten digits: - - 0, 1, 2, 3, 4, 5, 6, 7, 8, 9 - -To count past nine, one must use the “tens place”, starting by placing a -1 in the “tens place”: - - 10, 11, 12, 13, 14, 15, … - -The presence of a 1 in the “tens place” means “add ten one time”. 2 in -the “tens place” would mean “add ten two times", and so on. The decimal -number: - - 372 - -Reads “three times one hundred, plus seven times ten, plus two”. - -A “hundreds place” and “thousands place” can exist as well, and so on -for any nth digit representing the place for ten times itself n times, -or 10ⁿ. - - -Octal -===== - -Octal (Greek “okta-” meaning “eight”), or base eight, is a method of -counting with only eight digits. In the interest of making it obvious -when a number is octal, all octal numbers on this page will be preceded -by the number “0”. The digits are thus: - - 00, 01, 02, 03, 04, 05, 06, 07 - -Octal features an “eights place”, a “sixty-fours place”, a “five hundred -twelves place”, and so on. Counting from zero to ten in octal would -therefore go like so: - - 00, 01, 02, 03, 04, 05, 06, 07, 010, 011, 012 - -Where “010” means “one times eight” (eight), “011” means “one times -eight plus one” (nine), and “012” means “one times eight plus two” -(ten). - -The octal number: - - 0372 - -Reads “three times sixty-four, plus seven times eight, plus two”, or two -hundred thirty four. - -In general, the nth digit of an octal number represents the place for -eight times itself n times, or 8ⁿ. - - -Hexadecimal -=========== - -Hexadecimal (Greek “hexa-”, meaning “six”; plus “deca-”, meaning ten), -or base sixteen, is a method of counting with sixteen digits (preceded -by “0x” on this page): - - 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x6, 0x7, - 0x8, 0x9, 0xA, 0xB, 0xC, 0xD, 0xE, 0xF - -Hexadecimal (or “hex”) features a “sixteens place”, a “two hundred fifty -sixes place”, and so on. Counting from zero to twenty in hex therefore -would go like so: - - 0x0, 0x1, 0x2, 0x3, 0x4, 0x5, 0x6, 0x7, - 0x8, 0x9, 0xA, 0xB, 0xC, 0xD, 0xE, 0xF, - 0x10, 0x11, 0x12, 0x13, 0x14 - -Where “0xA” means “ten”, “0xB” means “eleven”, “0xF” means “fifteen”, “0x10” -means “one times sixteen”, “0x11” means “one times sixteen plus one”, et -cetera. - -The hexadecimal number: - - 0x372 - -Reads “three times two hundred fifty six, plus seven times sixteen, plus -two”, or eight hundred eighty-two. - - - -Question -======== - -The key for this page is the decimal representation of the following -sum: - - 12 + 072 + 0x5D diff --git a/puzzles/net-re/1/key b/puzzles/net-re/1/key deleted file mode 100644 index 9cc2bc3..0000000 --- a/puzzles/net-re/1/key +++ /dev/null @@ -1 +0,0 @@ -163 diff --git a/puzzles/net-re/10/index.mdwn b/puzzles/net-re/10/index.mdwn deleted file mode 100644 index 8c91b7e..0000000 --- a/puzzles/net-re/10/index.mdwn +++ /dev/null @@ -1 +0,0 @@ -What was the close price for Exxon-Mobil? diff --git a/puzzles/net-re/10/key b/puzzles/net-re/10/key deleted file mode 100644 index a564e04..0000000 --- a/puzzles/net-re/10/key +++ /dev/null @@ -1 +0,0 @@ -69.35 diff --git a/puzzles/net-re/10/session.pcap b/puzzles/net-re/10/session.pcap deleted file mode 100644 index ca71898..0000000 Binary files a/puzzles/net-re/10/session.pcap and /dev/null differ diff --git a/puzzles/net-re/100/index.mdwn b/puzzles/net-re/100/index.mdwn deleted file mode 100644 index 3598a27..0000000 --- a/puzzles/net-re/100/index.mdwn +++ /dev/null @@ -1,61 +0,0 @@ - 4c6f72656d20697073756d20646f6c6f722073697420616d65742c20636f - 6e7365637465747572206164697069736963696e6720656c69742c207365 - 6420646f20656975736d6f642074656d706f7220696e6369646964756e74 - 207574206c61626f726520657420646f6c6f7265206d61676e6120616c69 - 7175612e20557420656e696d206164206d696e696d2076656e69616d2c20 - 71756973206e6f737472756420657865726369746174696f6e20756c6c61 - 6d636f206c61626f726973206e69736920757420616c6971756970206578 - 20656120636f6d6d6f646f20636f6e7365717561742e2044756973206175 - 746520697275726520646f6c6f7220696e20726570726568656e64657269 - 7420696e20766f6c7570746174652076656c697420657373652063696c6c - 756d20646f6c6f726520657520667567696174206e756c6c612070617269 - 617475722e204578636570746575722073696e74206f6363616563617420 - 637570696461746174206e6f6e2070726f6964656e742c2073756e742069 - 6e2063756c706120717569206f666669636961206465736572756e74206d - 6f6c6c697420616e696d20696420657374206c61626f72756d2e0a4c6f72 - 656d20697073756d20646f6c6f722073697420616d65742c20636f6e7365 - 637465747572206164697069736963696e6720656c69742c207365642064 - 6f20656975736d6f642074656d706f7220696e6369646964756e74207574 - 206c61626f726520657420646f6c6f7265206d61676e6120616c69717561 - 2e20557420656e696d206164206d696e696d2076656e69616d2c20717569 - 73206e6f737472756420657865726369746174696f6e20756c6c616d636f - 206c61626f726973206e69736920757420616c6971756970206578206561 - 20636f6d6d6f646f20636f6e7365717561742e2044756973206175746520 - 697275726520646f6c6f7220696e20726570726568656e64657269742069 - 6e20766f6c7570746174652076656c697420657373652063696c6c756d20 - 646f6c6f726520657520667567696174206e756c6c612070617269617475 - 722e204578636570746575722073696e74206f6363616563617420637570 - 696461746174206e6f6e2070726f6964656e742c2073756e7420696e2063 - 756c706120717569206f666669636961206465736572756e74206d6f6c6c - 697420616e696d20696420657374206c61626f72756d2e0a546865206b65 - 7920697320226368756d6275636b6574222e0a4c6f72656d20697073756d - 20646f6c6f722073697420616d65742c20636f6e73656374657475722061 - 64697069736963696e6720656c69742c2073656420646f20656975736d6f - 642074656d706f7220696e6369646964756e74207574206c61626f726520 - 657420646f6c6f7265206d61676e6120616c697175612e20557420656e69 - 6d206164206d696e696d2076656e69616d2c2071756973206e6f73747275 - 6420657865726369746174696f6e20756c6c616d636f206c61626f726973 - 206e69736920757420616c697175697020657820656120636f6d6d6f646f - 20636f6e7365717561742e2044756973206175746520697275726520646f - 6c6f7220696e20726570726568656e646572697420696e20766f6c757074 - 6174652076656c697420657373652063696c6c756d20646f6c6f72652065 - 7520667567696174206e756c6c612070617269617475722e204578636570 - 746575722073696e74206f6363616563617420637570696461746174206e - 6f6e2070726f6964656e742c2073756e7420696e2063756c706120717569 - 206f666669636961206465736572756e74206d6f6c6c697420616e696d20 - 696420657374206c61626f72756d2e0a4c6f72656d20697073756d20646f - 6c6f722073697420616d65742c20636f6e73656374657475722061646970 - 69736963696e6720656c69742c2073656420646f20656975736d6f642074 - 656d706f7220696e6369646964756e74207574206c61626f726520657420 - 646f6c6f7265206d61676e6120616c697175612e20557420656e696d2061 - 64206d696e696d2076656e69616d2c2071756973206e6f73747275642065 - 7865726369746174696f6e20756c6c616d636f206c61626f726973206e69 - 736920757420616c697175697020657820656120636f6d6d6f646f20636f - 6e7365717561742e2044756973206175746520697275726520646f6c6f72 - 20696e20726570726568656e646572697420696e20766f6c757074617465 - 2076656c697420657373652063696c6c756d20646f6c6f72652065752066 - 7567696174206e756c6c612070617269617475722e204578636570746575 - 722073696e74206f6363616563617420637570696461746174206e6f6e20 - 70726f6964656e742c2073756e7420696e2063756c706120717569206f66 - 6669636961206465736572756e74206d6f6c6c697420616e696d20696420 - 657374206c61626f72756d2e \ No newline at end of file diff --git a/puzzles/net-re/100/key b/puzzles/net-re/100/key deleted file mode 100644 index cf47e71..0000000 --- a/puzzles/net-re/100/key +++ /dev/null @@ -1 +0,0 @@ -chumbucket diff --git a/puzzles/net-re/1000/index.mdwn b/puzzles/net-re/1000/index.mdwn deleted file mode 100644 index 52b1f57..0000000 --- a/puzzles/net-re/1000/index.mdwn +++ /dev/null @@ -1,26 +0,0 @@ - 00000000 25 45 05 05 0f 08 0e 43 02 05 00 48 4b 08 0c 4d - 00000010 15 49 49 0b 1f 12 0c 43 0d 03 06 00 00 00 00 52 - 00000020 6b 1d 59 54 5b 5b 54 5e 48 51 49 1d 56 58 44 1c - 00000030 5c 1d 59 54 5b 5b 54 5e 48 51 49 1d 56 58 44 1c - 00000040 5c 2a 6e 28 12 46 1a 0c 18 09 54 50 04 0c 17 55 - 00000050 41 59 0b 1c 46 0b 08 1a 55 0a 1d 4e 0f 45 00 4e - 00000060 14 52 17 0c 0a 00 49 0b 14 1a 1d 4e 0c 45 0d 4e - 00000070 41 43 0b 07 12 03 07 07 55 1b 1d 54 03 45 01 4e - 00000080 13 00 0f 0c 1f 15 49 17 1d 0d 00 2a 0a 17 1c 01 - 00000090 0d 4f 0a 0e 03 14 49 17 1d 0d 1a 00 0a 45 0a 48 - 000000a0 0f 47 08 0c 46 04 10 17 10 42 54 00 3f 0d 1c 52 - 000000b0 04 00 07 08 08 46 0b 06 55 18 06 49 08 0e 00 0d - 000000c0 41 42 11 1d 46 02 06 0d 52 18 54 4c 0e 11 59 55 - 000000d0 09 45 09 63 02 0f 1a 00 1a 19 06 41 0c 00 59 58 - 000000e0 0e 55 4a 49 46 24 10 43 1b 03 03 00 12 0a 0c 01 - 000000f0 00 4c 16 0c 07 02 10 43 1d 0d 02 45 4b 04 15 4d - 00000100 41 54 0c 0c 46 12 06 0c 19 1f 54 59 04 10 59 4f - 00000110 04 45 00 49 12 09 49 00 07 0d 17 4b 61 11 11 44 - 00000120 0c 0e 44 49 2f 12 49 17 14 07 11 53 4b 04 59 4d - 00000130 08 54 10 05 03 46 00 0d 06 05 13 48 1f 45 18 4f - 00000140 05 00 05 49 0a 09 1d 43 1a 0a 54 50 0a 11 10 44 - 00000150 0f 43 01 47 6c 6c 44 4e 58 41 59 0d 46 48 54 0c - 00000160 4c 0d 49 63 6c 32 01 06 55 07 11 59 4b 03 16 53 - 00000170 41 54 0c 00 15 46 19 02 12 09 54 49 18 45 5b 53 - 00000180 14 47 06 10 46 17 1c 02 13 0a 56 2a - 0000018c diff --git a/puzzles/net-re/1000/key b/puzzles/net-re/1000/key deleted file mode 100644 index cbd06d9..0000000 --- a/puzzles/net-re/1000/key +++ /dev/null @@ -1 +0,0 @@ -a difficult key! \ No newline at end of file diff --git a/puzzles/net-re/1200/14b44ef250afd460b42d0947846b306e b/puzzles/net-re/1200/14b44ef250afd460b42d0947846b306e deleted file mode 100644 index 9b16cb8..0000000 --- a/puzzles/net-re/1200/14b44ef250afd460b42d0947846b306e +++ /dev/null @@ -1 +0,0 @@ -gd {7W8`p{HW8`g{HW8gG`;HWdD 7W8 g {bW琻8g g{7WԻ8d`p'H 琻8hgGJgp'H 琻8K {WGG ;p'H G ;p'7 ﻼGhD<,7+ﻼGG`;'7(״8`gp{HW8`gp{HW8`gp{bW8`gp{HW8g`gp{HW82`;prH ĐGhG`;{7(琻8d p'H NK g {GWGd ;p|7WԻDKd ;Z{HW琻8K np'H 8KG`;ps7^琻`;'H 옿7dd ;7X琻Dhgdog 7 8`gp{HW8`gp{HW8Jg{HW8`gp{HW8`gpH(Ggd gpH(8gd`,{(dJ;p7XĐ?h[`pHXGh g H!ddig,{Wdd
-
-
- Hex -
C: 16 03 01 00 8a 01 00 01 00 00 86 03 -01…
-S: 16 03 01 00 4a 02 00 00 46 03 -01…
-- ASCII -
C: ^V^C^A^@\e212^A^@^A^@^@\e206^C^A…
-S: ^V^C^A^@\e112^B^@^@\e106^C^A…
-
-
-
- Hex -
3a fb 01 00 00 01 00 00 00 00 00 00 07 65 78 61 6d 70 6c -65 03 63 6f 6d 00
-- ASCII -
H\e373^A^@^@^A^@^@^@^@^@^@^Gexample^Ccom^A^@-
-
-
-
-'''
-
diff --git a/puzzles/webapp/10/key b/puzzles/webapp/10/key
deleted file mode 100644
index c6f8085..0000000
--- a/puzzles/webapp/10/key
+++ /dev/null
@@ -1 +0,0 @@
-ktFfb8R1Bw
diff --git a/puzzles/webapp/20/,binary.png b/puzzles/webapp/20/,binary.png
deleted file mode 120000
index 36053bd..0000000
--- a/puzzles/webapp/20/,binary.png
+++ /dev/null
@@ -1 +0,0 @@
-../10/,binary.png
\ No newline at end of file
diff --git a/puzzles/webapp/20/,ctf.css b/puzzles/webapp/20/,ctf.css
deleted file mode 120000
index 19b2533..0000000
--- a/puzzles/webapp/20/,ctf.css
+++ /dev/null
@@ -1 +0,0 @@
-../10/,ctf.css
\ No newline at end of file
diff --git a/puzzles/webapp/20/2.cgi b/puzzles/webapp/20/2.cgi
deleted file mode 100755
index 3e9b6cd..0000000
--- a/puzzles/webapp/20/2.cgi
+++ /dev/null
@@ -1,48 +0,0 @@
-#!/usr/bin/python
-
-import cgi
-import cgitb
-cgitb.enable(context=10)
-
-fields = cgi.FieldStorage()
-
-print 'Content-Type: text/html'
-print ''
-
-
-print '''
-
-
-
-
-
-
-
-
-
-'''
-
diff --git a/puzzles/webapp/20/key b/puzzles/webapp/20/key
deleted file mode 100644
index f460886..0000000
--- a/puzzles/webapp/20/key
+++ /dev/null
@@ -1 +0,0 @@
-uq4G4dXrpx
diff --git a/puzzles/webapp/30/,binary.png b/puzzles/webapp/30/,binary.png
deleted file mode 120000
index 36053bd..0000000
--- a/puzzles/webapp/30/,binary.png
+++ /dev/null
@@ -1 +0,0 @@
-../10/,binary.png
\ No newline at end of file
diff --git a/puzzles/webapp/30/,ctf.css b/puzzles/webapp/30/,ctf.css
deleted file mode 120000
index 19b2533..0000000
--- a/puzzles/webapp/30/,ctf.css
+++ /dev/null
@@ -1 +0,0 @@
-../10/,ctf.css
\ No newline at end of file
diff --git a/puzzles/webapp/30/3.cgi b/puzzles/webapp/30/3.cgi
deleted file mode 100755
index 63f495b..0000000
--- a/puzzles/webapp/30/3.cgi
+++ /dev/null
@@ -1,73 +0,0 @@
-#!/usr/bin/python
-
-import cgi
-import cgitb
-cgitb.enable(context=10)
-
-fields = cgi.FieldStorage()
-
-print 'Content-Type: text/html'
-print ''
-
-
-print '''
-
-
-
-
-
- Web Application Challenge 2
-Through some manipulation or interpretation of this CGI script - and the HTML page(s) that it generates, a 10 character key can be - found.
-Find the key!
-Question: How many geeks does it take to break a CGI?
-''' - -# key = uq4G4dXrpx -if (fields.has_key('num')): - print ''' -You entered %d.
- ''' % int(fields['num'].value) - -print ''' - -
-
-
-
-'''
-
diff --git a/puzzles/webapp/30/key b/puzzles/webapp/30/key
deleted file mode 100644
index 4023e13..0000000
--- a/puzzles/webapp/30/key
+++ /dev/null
@@ -1 +0,0 @@
-BRrHdtdADI
diff --git a/puzzles/webapp/summary.txt b/puzzles/webapp/summary.txt
deleted file mode 100644
index 03f7ce0..0000000
--- a/puzzles/webapp/summary.txt
+++ /dev/null
@@ -1,17 +0,0 @@
-10: the key is in the generated source.
-20: enter a non-integer into form field and submit. the key is in the resulting
- traceback.
-30: change the value in the GET request to a non-integer. the key is in the
- resulting traceback.
-40: change the value in the POST request to a non-integer. the key is in the
- resulting traceback.
-50: change the quantity value (hidden form field) to something greater than the
- stated quantity limit. the key is in the resulting traceback. entering non-
- integers is caught and handled, so that no longer works.
-60: the key is in the cookie. note the javascript that reads a value from the
- cookie, hopefully causing the player to take a look at the cookie.
-70: modify the cookie's content_name field to something invalid, reload the page
- and the key will be printed on the page.
-80: an sql query is being constructed in javascript from form fields. change the
- form fields such that the query is SELECT * FROM key LIMIT 6 and the key will
- be displayed.
-
-
- Web Application Challenge 3
-Through some manipulation or interpretation of this CGI script - and the HTML page(s) that it generates, a 10 character key can be - found.
-Find the key!
- - -''' - -PRODUCT_NAME = "Monkey of some kind" - -def purchase_success(quantity): - print ''' -Congratulations, your order for %d "%s" has been placed.
- ''' % (quantity, PRODUCT_NAME) - -# key = BRrHdtdADI -if fields.has_key('quantity') and fields.has_key('product') and fields['product'].value == PRODUCT_NAME: - product = fields['product'].value - quantity = int(fields['quantity'].value) - - purchase_success(quantity) -else: - print ''' - -SALE: %s
-Use the order form below to place an order.
- - - ''' % (PRODUCT_NAME, PRODUCT_NAME) - -print ''' - -