https://omega-coder.github.io/tags/writeup/ Recent content in writeup on CHERIEF Yassine Hugo -- gohugo.io en-us Yassine CHERIEF Sun, 05 May 2019 18:03:05 +0200 https://omega-coder.github.io/posts/inshack-you-shall-not-pass-forensics-330-writeup/ Sun, 05 May 2019 18:03:05 +0200 https://omega-coder.github.io/posts/inshack-you-shall-not-pass-forensics-330-writeup/ Challenge details. Category Points Solves Forensics 330 11 1. Challenge description One of my friends is a show-off and I don’t like that.Help me find the backdoor he just boasted about! :DYou’ll find an image of his USB key here.And one last thing, my friend owns you-shall-not-pass.ctf.insecurity-insa.fr. 2. Solution 2.1 Data Extraction Part By extracting the compressed file that was given to us, we find a raw image of an NTFS filesystem, you can verify that using the file command on linux. https://omega-coder.github.io/posts/angstromctf-2019-no-sequels-and-no-sequels2-web-writeup/ Fri, 26 Apr 2019 01:49:01 +0200 https://omega-coder.github.io/posts/angstromctf-2019-no-sequels-and-no-sequels2-web-writeup/ This blog post contains the writeup for two challenges (No SEQUELS & No SEQUELS 2), because they are related. So let’s start with No SEQUELS first. 1. No SEQUELS 1 Category: Web Points: 50 1.2 Challenge Description The prequels sucked, and the sequels aren’t much better, but at least we always have the original trilogy. Hint said : MongoDB is a safer alternative to SQL, right? https://omega-coder.github.io/posts/hacklab-esgi-2019-rookie-web-writeup/ Mon, 08 Apr 2019 10:59:30 +0200 https://omega-coder.github.io/posts/hacklab-esgi-2019-rookie-web-writeup/ Challenge Description Category Points Solves web 100 18 This is the URL for the challenge. URL:http://ctf.hacklab-esgi.org:8082/ So, as soon as we visit the given URL, we get a simple web page saying Website Checker and the title saying super curling (this gonna be fun!!). we notice that there is one input in the page, whatever you give as input gets passed to curl as a parameter. https://omega-coder.github.io/posts/securinets-ctf-2019-lost-flag-writeup/ Tue, 26 Mar 2019 17:37:37 +0200 https://omega-coder.github.io/posts/securinets-ctf-2019-lost-flag-writeup/ Description Category Points Solves Forensics 994 19 Description : Help me get back my flag ! URL: https://web8.ctfsecurinets.com/ After visiting the link above, we get a login page.We can login using admin/admin, but unfortunately the flag is deleted. Then I started searching in the website for any other infos, but with no success. the admin of the challenge (Tr'GFx) said that bruteforcing directories is enough to solve the challenge, so I used dirsearch.