# CSAW CTF Qualification Round 2017

## Another Xor - Crypto \[100 pts] \[Not Solved]

> Receiving a python script that encrypts a string using a user-chosen key, and an encrypted message- try to get the flag.

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTa0eTKctQTJ8tpYHG%2Fanotherxor100.zip?alt=media&token=c467bc15-006c-4a35-ac96-784f86513780" %}
Another Xor
{% endfile %}

I really want to try this one and solve it. Started in a competition but didn't know where to go.&#x20;

## Almost Xor - Crypto \[200 pts] \[Not Solved]

> Can you decode this ciphertext?\
> 809fdd88dafa96e3ee60c8f179f2d88990ef4fe3e252ccf462deae51872673dcd34cc9f55380cb86951b8be3d8429839

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdT_nScREmjtzLSIFaG%2Falmostxor.zip?alt=media&token=dfd672b0-8098-4ce0-9734-f5edae248219" %}
Almost Xor
{% endfile %}

Using the hex above and python file to get a solution.

## SCV - Pwn \[100 pts] \[Not Solved]

> Pwn SCV
>
> SCV is too hungry to mine the minerals. Can you give him some food?
>
> nc pwn.chal.csaw.io 3764

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTaKOk_GAmXhNynkrt%2FSCV100.zip?alt=media&token=45dd0ff4-441b-4ebd-ab14-74ab77016cd7" %}
SCV
{% endfile %}

I am just going to guess because it deals with food, it will be a buffer overflow.

## Pilot - Pwn \[75 pts] \[Not Solved]

> Pwn pilot
>
> Can I take your order?
>
> `nc pwn.chal.csaw.io 8464`

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTabWniVPZLfi8SLBn%2Fpilot75.zip?alt=media&token=5365f5a5-9c4a-4956-b02f-c51fab112101" %}
Pilot
{% endfile %}

Low points so if you need one to start on I would say this one

## Auir - Pwn \[200 pts] \[Not Solved]

> At long last, we stand at the threshold of destiny. For today, we will restore the glory of our legacy. Today, we will retake what we have lost and reclaim our homeworld. -Artanis-
>
> nc pwn.chal.csaw.io 7713

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTaq3bf3bKL8lswL3g%2FAuir200.zip?alt=media&token=0fa12dc4-5925-4c9f-818e-bbc2e8370a6d" %}
Auir
{% endfile %}

Write solution here

## Zone - Pwn \[300 pts] \[Not Solved]

> &#x20;

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTaytwftFVPeNWhvmd%2Fzone300.zip?alt=media&token=167f9d3a-ab1d-4c42-b317-eb78cce692cc" %}
Zone
{% endfile %}

Going to start with a hint that it is a heap-based challenge.

## FIREWALL - Pwn \[400 pts] \[Not Solved]

> &#x20;

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTb4Ekik-U_cXsF2Xy%2Ffirewall400.zip?alt=media&token=c3ec2ad1-f03e-47ad-ab04-f03ca638a64f" %}
Firewall
{% endfile %}

This problem is an exe file which means it is a window executable file. What a joy.

## Minesweeper - Pwn \[500 pts] \[Not Solved]

> Minesweeper\
> nc pwn.chal.csaw.io 7478

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTbHuBGLXXmGIhuDa7%2Fminesweeper.zip?alt=media&token=31bf47dd-4dec-4f49-9edb-be6e40934a78" %}
Minesweeper
{% endfile %}

I am going to guess it is going to need coding to complete a game or cheat the game. That or shell coding, not too sure at first glance. I only say that because of the point value at 500.

## tableEZ - Rev \[100 pts] \[Not Solved]

> &#x20;

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTbhvIJRwo2m4XQ98e%2Ftablez100.zip?alt=media&token=a288d55a-d9b3-4d81-aedb-32be041e1a88" %}
TableEZ
{% endfile %}

100 pts. If only I knew how to reverse engineer. I am guessing from tables it is referring to mapping.

## bananaScript - Rev \[450 pts] \[Not Solved]

> Not too sure how to Interpret this, the lab member who wrote this "forgot" to write any documentation. This shit, and him, is bananas. B, A-N-A-N-A-S.

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTc4r3FHf1P-8vbAAS%2FBananaScript450.zip?alt=media&token=8637ec51-4bf5-44f9-bc8e-837680f4e778" %}
Banana Script
{% endfile %}

Write a solution if I ever attempt it

## Gopherz - Rev \[350 pts] \[Not Solved]

> [gopher://reversing.chal.csaw.io:7070](gopher://reversing.chal.csaw.io:7070)

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTcEFdTJnF4S0ful4K%2FGopherz%20350.zip?alt=media&token=d33eacca-ab53-4524-b94b-409ab883c6d4" %}
Gopherz
{% endfile %}

Write solution here if possible without nc into it.

## Grump Check - Rev \[Problem Not Found]

> Hey, I'm Grump!
>
> nc reversing.chal.csaw.io 1930

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTcLXi-A0QfcBYQGBi%2Fgrumpcheck.zip?alt=media&token=e113e9bd-0eb1-4bdb-a958-dadb4e6558a8" %}
Grump Check
{% endfile %}

## Prophecy - Rev \[200 pts] \[Not Solved]

> The prophecy is more important than either of us! Reveal its secrets, Zeratul! The future rests on it!" -Karass-

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTcTcz_r-wI70sbSn0%2Fprophecy.zip?alt=media&token=1f7f561f-535f-443f-b772-d4b8a6e74834" %}
Prophecy
{% endfile %}

I don't know what to think about the problem.

## Realism- Rev \[400 pts] \[Not Solved]

> &#x20;

{% file src="https://980792987-files.gitbook.io/~/files/v0/b/gitbook-legacy-files/o/assets%2F-Md9Bzo_DCKomMglV10a%2F-MdT_TiQgVr5LMfjrBn9%2F-MdTcac6e5zs7Sb2wTrS%2FRealism%20400.zip?alt=media&token=c3d84a82-a19b-4cbc-b0e0-454113d31628" %}
Realism
{% endfile %}

Realism. The Fact of reality.
