Skip to main content

CyberYoddha CTF - Writeup

 


This blog post contains the writeups for the following challenges :-

  • Misc
    • Lorem Ipsum
  • Forensics
    • Image Viewer
    • The row beneath
    • What's the password
    • Steg 2
    • Steg Ultimate
  • Cryptography
    • Beware the Ides of March
    • Sus
  • Reverse Engineering
    • Password 1
  • Trivia
    • Trivia 1
    • Trivia 3
    • Trivia 4
    • Trivia 5
    • Trivia 7
    • Trivia 8




LOREM IPSUM

The given text when googled will give you the original text and you'll realise that the given text has some additional characters attached to some words.

Lorem ipsum dolor/c/ sit amet, consectetur/y/ adipiscing /c/elit, sed do/t/ eiusmod tempor inci/f/didunt ut labore et dolore magna aliqua/l/. Ut enim ad minim/a/ veniam, quis/t/ nostrud exercitation ullamco/i/ laboris nisi/n/ ut aliquip ex ea/i/ commodo/s/ consequat. Duis /c/aute irure dolor in reprehenderit in voluptate velit /o/esse cillum dolore eu fugiat nulla pariatur. Excepteur /o/sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim /l/id est laborum.

Extracting all these characters will give the flag.
So the flag for this challenge is CYCTF{latiniscool}





IMAGE VIEWER


Taking a strings of the given image will provide the flag.




CYCTF{h3h3h3_1m@g3_M3t@d@t@_v13w3r_ICU}





THE ROW BENEATH


Similar to the previous challenge the flag can be retrieved with the help of strings.




So the flag is CYCTF{L00k_1n_th3_h3x_13h54d56}





WHATS THE PASSWORD?


I used steghide to extract the image. Firstly I tried with an empty password. When that didn't worked I took a look at the image and the password was clear. It was sudo


So the flag was written in the extracted text file. 
And the flag is CYCTF{U$3_sud0_t0_achi3v3_y0ur_dr3@m$!}





STEG 2


I used stegsolve and found the flag in red plane 1


The flag is CYCTF{l$b_st3g@n0gr@phy_f0r_th3_w1n}





STEG ULTIMATE



First I used an empty password to extract steg3.jpg out of the original image using steghide. Then I used steghide again with an empty password on steg3.jpg and got a text file which directed me to pastebin.
The pastebin URL was https://pastebin.com/YnKqT9s3

When I went to this URL I received the following message:

Hmmmm. What cipher is this? Sometimes, it's not the type we think.

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

The cipher was base64 encoded and decoding it gave me the ascii code of a PNG image




I used Cyberchef to decode and save the file as a PNG and got the flag

CYCTF{2_f0r_th3_pr1c3_0f_1_b64}







BEWARE THE IDES OF MARCH


The given ciphertext is JFJAM{j@3$@y_j!wo3y}. Now one thing is very clear that JFJAM will convert to CYCTF. Notice the positions of J's and C's. This was a clear indication of Caesar Cipher. So I used dcode to convert the ciphertext to plain and found that the key was +7.
So the flag was CYCTF{c@3$@r_c!ph3r}





SUS


For this one I guessed that it could be a Vignere Cipher. So I used Guballa to decode it and found the plaintext to be wouldyoulikesomevinegarwiththat and key to be salad.




So the flag is CYCTF{wouldyoulikesomevinegarwiththat}





PASSWORD 1


The contents of the file are:
import random

def checkPassword(password):
    if(len(password) != 43):
      return False
    if(password[26] == 'r' and 
      password[33] == 't' and 
      password[32] == '3' and 
      password[16] == '3' and 
      password[4] == 'F' and 
      password[21] == 'r' and 
      password[38] == '1' and 
      password[18] == 'c' and 
      password[22] == '@' and 
      password[31] == 'g' and 
      password[7] == 'u' and 
      password[0] == 'C' and 
      password[6] == 'p' and 
      password[39] == '3' and 
      password[3] == 'T' and 
      password[25] == '3' and 
      password[29] == 't' and 
      password[42] == '}' and 
      password[12] == 'g' and 
      password[23] == 'c' and 
      password[30] == '0' and 
      password[40] == '3' and 
      password[28] == '_' and 
      password[20] == '@' and 
      password[27] == '$' and 
      password[17] == '_' and 
      password[35] == '3' and 
      password[8] == '7' and 
      password[24] == 't' and 
      password[41] == '7' and 
      password[13] == '_' and 
      password[5] == '{' and 
      password[2] == 'C' and 
      password[11] == 'n' and 
      password[9] == '7' and 
      password[15] == 'h' and 
      password[34] == 'h' and 
      password[1] == 'Y' and 
      password[10] == '1' and 
      password[37] == '_' and 
      password[14] == 't' and 
      password[36] == 'r' and 
      password[19] == 'h'):
      return True
    return False

password = input("Enter password: ")
if(checkPassword(password)):
  print("PASSWORD ACCEPTED\n")
else:
  print("PASSWORD DENIED\n")

So I just rearranged the code which was a useless effort as I could have used python to manage this somehow.
The flag is CYCTF{pu771ng_th3_ch@r@ct3r$_t0g3th3r_1337}





TRIVIA 1


The flag is Linus Torvalds






TRIVIA 3


Found the answer on Wikipedia




The flag is Yahoo






TRIVIA 4


The flag is honeypot






TRIVIA 5


The flag is shoulder surfing






TRIVIA 7



The flag is sfc





TRIVIA 8


I just reverse searched the image on Google
The flag is haskell

Comments

Post a Comment

Popular posts from this blog

Hacktober CTF - Writeup

  HACKTOBER CTF   This post contains the writeups for: l  Crypto n  Hail Caesar n  Down The Wrong Path l  Forensics n  Captured Memories n  Amcaching In n  Prefetch Perfection n  Prefetch Perfection 2 l  Linux n  Talking to the dead 1 n  Talking to the dead 2 l  Programming n  Message in an array n  Trick or treat l  Steganography n  You believe in ghosts n  Start digging n  Blasphemy   1 OSINT         n Creeping 1        n  Creeping 2         n Creeping 3         n Past Attacks       Hail Caesar In this question we have to decrypt TGG KUSJWV QGM and the question gives us a hint that its a caesar cipher. Although we don’t know the key but we really don’t need one for this. Loading it up in dcode gives us the answer as BOO SCARED YOU   And thus the flag is flag{ BOO SCARED YOU }           Down The Wrong Path The given image shows a transposition cipher.   So reading it in a similar fashion results in this message: REMEMBER TO TELL SPOOKYBOI ABOUT THE NEW TARGETS OF OUR NEXT ATTACK   So

C4ptur3-th3-fl4g Walkthrough

TryHackMe c4ptur3-th3-fl4g Walkthrough Task - 1 Translation and Shifting Question 1 -  c4n y0u c4p7u23 7h3 f149? Solution -  This one's quite simple. This is called leet in which the text is written with modified spellings with the help of numbers in place of some characters. The answer for this one is - can you capture the flag? Question 2 -  01101100 01100101 01110100 01110011 00100000 01110100 01110010 01111001 00100000 01110011 01101111 01101101 01100101 00100000 01100010 01101001 01101110 01100001 01110010 01111001 00100000 01101111 01110101 01110100 00100001 Solution -  This is written in binary as you can see that every set of 1's and 0's (separated by space) is a string of 8 numbers. So you can use any online resource such as  rapidtables  to convert binary to ascii. The answer for this is -  lets try some binary out! Question 3 -  MJQXGZJTGIQGS4ZAON2XAZLSEBRW63LNN5XCA2LOEBBVIRRHOM====== HINT :  Having an equal sign at the end of