WE ARE NOW ON GITHUB. Need more informations ? Visit : http://hexpresso.github.io/

This task is a Crackme/Reverse task worth 150 points from the Nuit du Hack qualifications. We are given an ELF : This task was not particularly hard, but we solved it in an interesting way. As usual, we start by opening the crackme in IDA. We quickly notice that it expects a serial number in […]

This task is a web task worth 100 points from the Nuit du Hack qualifications. Its name should have been « guest fest » We are given a website, where you can upload files. There are already a few files uploaded : confidentials.txt, which is private, and paste01.txt. Both have been uploaded by the same user. We […]

This task is an exploit task worth 350 points from the Nuit du Hack qualifications. We are given the following Python code : This scripts connects to a server (151.80.18.93, port 4241). The servers sends us a challenge. It will be used as a salt to hash our password. We then try to login with […]

This task is an exploit task worth 200 points from the Nuit du Hack qualifications. We are given a website with a login form, and a link to an other page : update.py Thxer’s first idea was to look for pyc files. We then decompiled update.pyc with uncompyle: You know what is fun in challenges […]

This task is a web task worth 100 points from the Nuit du Hack qualifications. We are given a website that lets you upload txt files for a cover letter, and a motivation letter. (cv.txt, motiv.txt) It is also possible to a tar file containing both files. Once you uploaded them, you can see them […]

Private 100 was a nice but really easy challenge. Many people found it difficult but it was not. The first thing to do was to read the network capture to see the content. We see many things, like STP, ICMP, ARP, CDP… Well, our first though was to check ICMP data : nothing. After that, […]