FPT Uni SecAthon 3 | MISC Writeup | PRP301

Xin chào, mình là Antoine, thuộc team 0ni0n_4aters. Sau đây là write-up của mình cho 1 challenge mà mình khá tâm đắc từ người anh Lừa ĐLM:)) Thể loại: Miscellaneous. Thử thách: Discord Bot is broken :<Direct Message FUCTF Bot #3982 for more detail (￣︶￣))Note: Using command *!help Gợi ý: 1) Pyjail...

Continue Reading...

FPT Uni Secathon 3 | Cryptography Writeup | CRY301 - CRY302

This is an annual competition for FPT University students to practice their skills with jeopardy CTF challenges. I was with my team, M1sh13f, and we’re at the #5 place. Congrats me and my amazing teammates!!!!No more beating around the bush, here are my write-ups for the first two cryptography challenges. Challenge:...

Continue Reading...

FPT Uni SecAthon 3 | Web Writeup | IAW301 - IAW302

Written by HADES * Contact me via discord: 𝖍𝖆𝖉𝖊𝖘#5218 * I. IAW302 : (RACE CONDITION)     <?php    session_start();    @include '/flag.php';    if(!isset($_GET['choose'])){        highlight_file("result.php");        die();    }    $name = md5(date("ms").md5($_GET['choose']).@$_COOKIE['PHPSESSID']);    session_destroy();    $log_file = "./".$name.".txt";    echo "Log: $log_file</br>";    file_put_contents($log_file,$_GET['choose']);    if(@unlink($log_file)){        die("Loser");    }    echo @$flag;    ?>1....

Continue Reading...

FPT Uni SecAthon 3 | Web Writeup | PRP302

 In this challenge, we have a form.Try input 1, we have a base64 string.But we have nothing when decoding it, then I guess it is encrypted.I tried dirsearch and found ‘.git’ :Then, we use GitHack to get source code. In folder ‘form’, we found file AES.pyNow, we have key and iv,...

Continue Reading...