QUALS_NDH 2k15 | FaceBox WEB 100 [WRITEUP]

This task is a web task worth 100 points from the Nuit du Hack qualifications. Its name should have been « guest fest » We are given a website, where you can upload files. There are already a few files uploaded : confidentials.txt, which is private, and paste01.txt. Both have been uploaded by the same user. We […]

QUALS_NDH 2k15 | GAME OF LIFE CRYPTO 150 [WRITEUP]

I wrote this writeup because I have seen some guys doing this challenge by using XORTOOL, but without understanding … mister X | python xortool.py cipher.txt; cat xortool_out/000.out mister X | So hardcore That’s why I’ll try to give you a real explaination of « why xortool have worked » So, for this challenge, we were given […]

QUALS_NDH 2k15 | Facesec WEB 100 [WRITEUP]

This task is a web task worth 100 points from the Nuit du Hack qualifications. We are given a website that lets you upload txt files for a cover letter, and a motivation letter. (cv.txt, motiv.txt) It is also possible to a tar file containing both files. Once you uploaded them, you can see them […]

QUALS_NDH 2k15 | PRIVATE 100 [WRITEUP]

Private 100 was a nice but really easy challenge. Many people found it difficult but it was not. The first thing to do was to read the network capture to see the content. We see many things, like STP, ICMP, ARP, CDP… Well, our first though was to check ICMP data : nothing. After that, […]