aaa
This commit is contained in:
parent
e6774e9e33
commit
c9360587cb
35 changed files with 3191 additions and 0 deletions
|
@ -0,0 +1,2 @@
|
|||
After decades of research, we have finally managed to catalogue all
|
||||
the animals on the planet earth. Including very rare pictures!
|
Binary file not shown.
|
@ -0,0 +1,26 @@
|
|||
We don't remember why, but we wanted a file system on an
|
||||
AVR328p. After the system was completed we discovered that it lacked
|
||||
basic security. A couple of beers later we came up with what we think
|
||||
is a revolutionary way to do file system permissions. It is now your
|
||||
task to fill in our shoes and test its security.
|
||||
|
||||
The filesystem allows you to request the contents of one or more
|
||||
available files by using the following format:
|
||||
|
||||
token#<filename>[:<filename>]
|
||||
|
||||
So for example, a request would be:
|
||||
|
||||
933d86ae930c9a5d6d3a334297d9e72852f05c57#cat.txt:finances.csv
|
||||
|
||||
Some example files (token | call):
|
||||
|
||||
96103df3b928d9edc5a103d690639c94628824f5 | cat.txt
|
||||
933d86ae930c9a5d6d3a334297d9e72852f05c57 | cat.txt:finances.csv
|
||||
83f86c0ba1d2d5d60d055064256cd95a5ae6bb7d | cat.txt:finances.csv:joke.txt
|
||||
ba2e8af09b57080549180a32ac1ff1dde4d30b14 | cat.txt:joke.txt
|
||||
0b939251f4c781f43efef804ee8faec0212f1144 | finances.csv
|
||||
4b0972ec7282ad9e991414d1845ceee546eac7a1 | finances.csv:joke.txt
|
||||
715b21027dca61235e2663e59a9bdfb387ca7997 | joke.txt
|
||||
|
||||
Can you access any file you're not supposed to?
|
|
@ -0,0 +1,25 @@
|
|||
import serial
|
||||
|
||||
ser = serial.Serial("COM7", 19200, timeout=0.1)
|
||||
|
||||
#def read_until(until):
|
||||
# out = ()
|
||||
# while 'until' != 'out':
|
||||
# out = (ser.read(1000))
|
||||
# return out
|
||||
|
||||
def read_until(something):
|
||||
output = ()
|
||||
while something not in output:
|
||||
output = (ser.read(124000))
|
||||
#print (output)
|
||||
return output
|
||||
|
||||
print ("__Attente de la réponse du board")
|
||||
print ((read_until(b'>>')).decode())
|
||||
|
||||
ser.write(('933d86ae930c9a5d6d3a334297d9e72852f05c57#cat.txt:finances.csv\r\n').encode())
|
||||
print ("__Attaque")
|
||||
|
||||
print ("__Attente de la réponse après l'attaque")
|
||||
print (((read_until(b'\r\n\r\n'))).decode())
|
375
Rhme-2016-master/challenges/binaries/avr_filesystem/untitled.csv
Normal file
375
Rhme-2016-master/challenges/binaries/avr_filesystem/untitled.csv
Normal file
|
@ -0,0 +1,375 @@
|
|||
Time [s], Analyzer Name, Decoded Protocol Result
|
||||
3.352752850000000,Async Serial,\r (0x0D)
|
||||
3.353272540000000,Async Serial,\n (0x0A)
|
||||
3.353792220000000,Async Serial,\r (0x0D)
|
||||
3.354311910000000,Async Serial,\n (0x0A)
|
||||
3.354831600000000,Async Serial,R (0x52)
|
||||
3.355351280000000,Async Serial,H (0x48)
|
||||
3.355870970000000,Async Serial,M (0x4D)
|
||||
3.356390650000000,Async Serial,e (0x65)
|
||||
3.356910340000000,Async Serial,O (0x4F)
|
||||
3.357430030000000,Async Serial,S (0x53)
|
||||
3.357949710000000,Async Serial,' ' (0x20)
|
||||
3.358469400000000,Async Serial,f (0x66)
|
||||
3.358989080000000,Async Serial,i (0x69)
|
||||
3.359508770000000,Async Serial,l (0x6C)
|
||||
3.360028460000000,Async Serial,e (0x65)
|
||||
3.360548140000000,Async Serial,' ' (0x20)
|
||||
3.361067830000000,Async Serial,A (0x41)
|
||||
3.361587510000000,Async Serial,P (0x50)
|
||||
3.362107200000000,Async Serial,I (0x49)
|
||||
3.362626890000000,Async Serial,\r (0x0D)
|
||||
3.363146570000000,Async Serial,\n (0x0A)
|
||||
3.363666260000000,Async Serial,F (0x46)
|
||||
3.364185940000000,Async Serial,i (0x69)
|
||||
3.364705630000000,Async Serial,l (0x6C)
|
||||
3.365225320000000,Async Serial,e (0x65)
|
||||
3.365745000000000,Async Serial,s (0x73)
|
||||
3.366264690000000,Async Serial,' ' (0x20)
|
||||
3.366784370000000,Async Serial,i (0x69)
|
||||
3.367304060000000,Async Serial,n (0x6E)
|
||||
3.367823750000000,Async Serial,' ' (0x20)
|
||||
3.368343430000000,Async Serial,s (0x73)
|
||||
3.368863120000000,Async Serial,y (0x79)
|
||||
3.369382800000000,Async Serial,s (0x73)
|
||||
3.369902490000000,Async Serial,t (0x74)
|
||||
3.370422180000000,Async Serial,e (0x65)
|
||||
3.370941860000000,Async Serial,m (0x6D)
|
||||
3.371461550000000,Async Serial,: (0x3A)
|
||||
3.371981240000000,Async Serial,\r (0x0D)
|
||||
3.372500920000000,Async Serial,\n (0x0A)
|
||||
3.373020610000000,Async Serial,\r (0x0D)
|
||||
3.373540290000000,Async Serial,\n (0x0A)
|
||||
3.374059980000000,Async Serial,d (0x64)
|
||||
3.374579670000000,Async Serial,r (0x72)
|
||||
3.375099350000000,Async Serial,w (0x77)
|
||||
3.375619040000000,Async Serial,x (0x78)
|
||||
3.376138720000000,Async Serial,r (0x72)
|
||||
3.376658410000000,Async Serial,w (0x77)
|
||||
3.377178100000000,Async Serial,x (0x78)
|
||||
3.377697780000000,Async Serial,r (0x72)
|
||||
3.378217470000000,Async Serial,- (0x2D)
|
||||
3.378737160000000,Async Serial,x (0x78)
|
||||
3.379256840000000,Async Serial,' ' (0x20)
|
||||
3.379776530000000,Async Serial,r (0x72)
|
||||
3.380296210000000,Async Serial,e (0x65)
|
||||
3.380815900000000,Async Serial,m (0x6D)
|
||||
3.381335580000000,Async Serial,o (0x6F)
|
||||
3.381855270000000,Async Serial,t (0x74)
|
||||
3.382374960000000,Async Serial,e (0x65)
|
||||
3.382894640000000,Async Serial,' ' (0x20)
|
||||
3.383414330000000,Async Serial,r (0x72)
|
||||
3.383934020000000,Async Serial,e (0x65)
|
||||
3.384453700000000,Async Serial,m (0x6D)
|
||||
3.384973390000000,Async Serial,o (0x6F)
|
||||
3.385493070000000,Async Serial,t (0x74)
|
||||
3.386012760000000,Async Serial,e (0x65)
|
||||
3.386532450000000,Async Serial,' ' (0x20)
|
||||
3.387052130000000,Async Serial,4 (0x34)
|
||||
3.387571820000000,Async Serial,0 (0x30)
|
||||
3.388091510000000,Async Serial,9 (0x39)
|
||||
3.388611190000000,Async Serial,6 (0x36)
|
||||
3.389130880000000,Async Serial,' ' (0x20)
|
||||
3.389650560000000,Async Serial,s (0x73)
|
||||
3.390170250000000,Async Serial,e (0x65)
|
||||
3.390689940000000,Async Serial,p (0x70)
|
||||
3.391209620000000,Async Serial,' ' (0x20)
|
||||
3.391729310000000,Async Serial,' ' (0x20)
|
||||
3.392248990000000,Async Serial,1 (0x31)
|
||||
3.392768680000000,Async Serial,' ' (0x20)
|
||||
3.393288370000000,Async Serial,. (0x2E)
|
||||
3.393808050000000,Async Serial,\r (0x0D)
|
||||
3.394327740000000,Async Serial,\n (0x0A)
|
||||
3.394847420000000,Async Serial,d (0x64)
|
||||
3.395367110000000,Async Serial,r (0x72)
|
||||
3.395886800000000,Async Serial,w (0x77)
|
||||
3.396406480000000,Async Serial,x (0x78)
|
||||
3.396926170000000,Async Serial,r (0x72)
|
||||
3.397445850000000,Async Serial,w (0x77)
|
||||
3.397965540000000,Async Serial,x (0x78)
|
||||
3.398485230000000,Async Serial,r (0x72)
|
||||
3.399004910000000,Async Serial,- (0x2D)
|
||||
3.399524600000000,Async Serial,x (0x78)
|
||||
3.400044290000000,Async Serial,' ' (0x20)
|
||||
3.400563970000000,Async Serial,r (0x72)
|
||||
3.401083660000000,Async Serial,e (0x65)
|
||||
3.401603340000000,Async Serial,m (0x6D)
|
||||
3.402123030000000,Async Serial,o (0x6F)
|
||||
3.402642720000000,Async Serial,t (0x74)
|
||||
3.403162400000000,Async Serial,e (0x65)
|
||||
3.403682090000000,Async Serial,' ' (0x20)
|
||||
3.404201780000000,Async Serial,r (0x72)
|
||||
3.404721460000000,Async Serial,e (0x65)
|
||||
3.405241150000000,Async Serial,m (0x6D)
|
||||
3.405760830000000,Async Serial,o (0x6F)
|
||||
3.406280520000000,Async Serial,t (0x74)
|
||||
3.406800210000000,Async Serial,e (0x65)
|
||||
3.407319890000000,Async Serial,' ' (0x20)
|
||||
3.407839580000000,Async Serial,4 (0x34)
|
||||
3.408359260000000,Async Serial,0 (0x30)
|
||||
3.408878950000000,Async Serial,9 (0x39)
|
||||
3.409398640000000,Async Serial,6 (0x36)
|
||||
3.409918320000000,Async Serial,' ' (0x20)
|
||||
3.410438010000000,Async Serial,s (0x73)
|
||||
3.410957700000000,Async Serial,e (0x65)
|
||||
3.411477380000000,Async Serial,p (0x70)
|
||||
3.411997070000000,Async Serial,' ' (0x20)
|
||||
3.412516750000000,Async Serial,' ' (0x20)
|
||||
3.413036440000000,Async Serial,1 (0x31)
|
||||
3.413556130000000,Async Serial,' ' (0x20)
|
||||
3.414075810000000,Async Serial,. (0x2E)
|
||||
3.414595500000000,Async Serial,. (0x2E)
|
||||
3.415115180000000,Async Serial,\r (0x0D)
|
||||
3.415634870000000,Async Serial,\n (0x0A)
|
||||
3.416154560000000,Async Serial,- (0x2D)
|
||||
3.416674240000000,Async Serial,r (0x72)
|
||||
3.417193930000000,Async Serial,- (0x2D)
|
||||
3.417713610000000,Async Serial,- (0x2D)
|
||||
3.418233300000000,Async Serial,r (0x72)
|
||||
3.418752990000000,Async Serial,- (0x2D)
|
||||
3.419272670000000,Async Serial,- (0x2D)
|
||||
3.419792360000000,Async Serial,r (0x72)
|
||||
3.420312040000000,Async Serial,- (0x2D)
|
||||
3.420831730000000,Async Serial,- (0x2D)
|
||||
3.421351420000000,Async Serial,' ' (0x20)
|
||||
3.421871100000000,Async Serial,r (0x72)
|
||||
3.422390790000000,Async Serial,e (0x65)
|
||||
3.422910480000000,Async Serial,m (0x6D)
|
||||
3.423430160000000,Async Serial,o (0x6F)
|
||||
3.423949850000000,Async Serial,t (0x74)
|
||||
3.424469530000000,Async Serial,e (0x65)
|
||||
3.424989220000000,Async Serial,' ' (0x20)
|
||||
3.425508910000000,Async Serial,r (0x72)
|
||||
3.426028590000000,Async Serial,e (0x65)
|
||||
3.426548280000000,Async Serial,m (0x6D)
|
||||
3.427067970000000,Async Serial,o (0x6F)
|
||||
3.427587650000000,Async Serial,t (0x74)
|
||||
3.428107340000000,Async Serial,e (0x65)
|
||||
3.428627020000000,Async Serial,' ' (0x20)
|
||||
3.429146710000000,Async Serial,' ' (0x20)
|
||||
3.429666400000000,Async Serial,' ' (0x20)
|
||||
3.430186080000000,Async Serial,8 (0x38)
|
||||
3.430705770000000,Async Serial,7 (0x37)
|
||||
3.431225460000000,Async Serial,' ' (0x20)
|
||||
3.431745140000000,Async Serial,s (0x73)
|
||||
3.432264830000000,Async Serial,e (0x65)
|
||||
3.432784510000000,Async Serial,p (0x70)
|
||||
3.433304200000000,Async Serial,' ' (0x20)
|
||||
3.433823890000000,Async Serial,1 (0x31)
|
||||
3.434343570000000,Async Serial,4 (0x34)
|
||||
3.434863260000000,Async Serial,' ' (0x20)
|
||||
3.435382940000000,Async Serial,c (0x63)
|
||||
3.435902630000000,Async Serial,a (0x61)
|
||||
3.436422320000000,Async Serial,t (0x74)
|
||||
3.436942000000000,Async Serial,. (0x2E)
|
||||
3.437461690000000,Async Serial,t (0x74)
|
||||
3.437981370000000,Async Serial,x (0x78)
|
||||
3.438501060000000,Async Serial,t (0x74)
|
||||
3.439020750000000,Async Serial,\r (0x0D)
|
||||
3.439540430000000,Async Serial,\n (0x0A)
|
||||
3.440060120000000,Async Serial,- (0x2D)
|
||||
3.440579800000000,Async Serial,r (0x72)
|
||||
3.441099490000000,Async Serial,- (0x2D)
|
||||
3.441619180000000,Async Serial,- (0x2D)
|
||||
3.442138860000000,Async Serial,r (0x72)
|
||||
3.442658550000000,Async Serial,- (0x2D)
|
||||
3.443178240000000,Async Serial,- (0x2D)
|
||||
3.443697920000000,Async Serial,r (0x72)
|
||||
3.444217610000000,Async Serial,- (0x2D)
|
||||
3.444737290000000,Async Serial,- (0x2D)
|
||||
3.445256980000000,Async Serial,' ' (0x20)
|
||||
3.445776670000000,Async Serial,r (0x72)
|
||||
3.446296350000000,Async Serial,e (0x65)
|
||||
3.446816040000000,Async Serial,m (0x6D)
|
||||
3.447335720000000,Async Serial,o (0x6F)
|
||||
3.447855410000000,Async Serial,t (0x74)
|
||||
3.448375100000000,Async Serial,e (0x65)
|
||||
3.448894780000000,Async Serial,' ' (0x20)
|
||||
3.449414470000000,Async Serial,r (0x72)
|
||||
3.449934160000000,Async Serial,e (0x65)
|
||||
3.450453840000000,Async Serial,m (0x6D)
|
||||
3.450973530000000,Async Serial,o (0x6F)
|
||||
3.451493210000000,Async Serial,t (0x74)
|
||||
3.452012900000000,Async Serial,e (0x65)
|
||||
3.452532590000000,Async Serial,' ' (0x20)
|
||||
3.453052270000000,Async Serial,' ' (0x20)
|
||||
3.453571960000000,Async Serial,' ' (0x20)
|
||||
3.454091640000000,Async Serial,4 (0x34)
|
||||
3.454611330000000,Async Serial,7 (0x37)
|
||||
3.455131020000000,Async Serial,' ' (0x20)
|
||||
3.455650700000000,Async Serial,s (0x73)
|
||||
3.456170390000000,Async Serial,e (0x65)
|
||||
3.456690080000000,Async Serial,p (0x70)
|
||||
3.457209760000000,Async Serial,' ' (0x20)
|
||||
3.457729450000000,Async Serial,1 (0x31)
|
||||
3.458249130000000,Async Serial,6 (0x36)
|
||||
3.458768820000000,Async Serial,' ' (0x20)
|
||||
3.459288510000000,Async Serial,f (0x66)
|
||||
3.459808190000000,Async Serial,i (0x69)
|
||||
3.460327880000000,Async Serial,n (0x6E)
|
||||
3.460847560000000,Async Serial,a (0x61)
|
||||
3.461367250000000,Async Serial,n (0x6E)
|
||||
3.461886940000000,Async Serial,c (0x63)
|
||||
3.462406620000000,Async Serial,e (0x65)
|
||||
3.462926310000000,Async Serial,s (0x73)
|
||||
3.463446000000000,Async Serial,. (0x2E)
|
||||
3.463965680000000,Async Serial,c (0x63)
|
||||
3.464485370000000,Async Serial,s (0x73)
|
||||
3.465005050000000,Async Serial,v (0x76)
|
||||
3.465524740000000,Async Serial,\r (0x0D)
|
||||
3.466044430000000,Async Serial,\n (0x0A)
|
||||
3.466564110000000,Async Serial,- (0x2D)
|
||||
3.467083800000000,Async Serial,r (0x72)
|
||||
3.467603480000000,Async Serial,- (0x2D)
|
||||
3.468123170000000,Async Serial,- (0x2D)
|
||||
3.468642860000000,Async Serial,r (0x72)
|
||||
3.469162540000000,Async Serial,- (0x2D)
|
||||
3.469682230000000,Async Serial,- (0x2D)
|
||||
3.470201910000000,Async Serial,r (0x72)
|
||||
3.470721600000000,Async Serial,- (0x2D)
|
||||
3.471241290000000,Async Serial,- (0x2D)
|
||||
3.471760970000000,Async Serial,' ' (0x20)
|
||||
3.472280660000000,Async Serial,r (0x72)
|
||||
3.472800340000000,Async Serial,e (0x65)
|
||||
3.473320030000000,Async Serial,m (0x6D)
|
||||
3.473839720000000,Async Serial,o (0x6F)
|
||||
3.474359400000000,Async Serial,t (0x74)
|
||||
3.474879090000000,Async Serial,e (0x65)
|
||||
3.475398780000000,Async Serial,' ' (0x20)
|
||||
3.475918460000000,Async Serial,r (0x72)
|
||||
3.476438150000000,Async Serial,e (0x65)
|
||||
3.476957830000000,Async Serial,m (0x6D)
|
||||
3.477477520000000,Async Serial,o (0x6F)
|
||||
3.477997210000000,Async Serial,t (0x74)
|
||||
3.478516890000000,Async Serial,e (0x65)
|
||||
3.479036580000000,Async Serial,' ' (0x20)
|
||||
3.479556270000000,Async Serial,' ' (0x20)
|
||||
3.480075950000000,Async Serial,' ' (0x20)
|
||||
3.480595640000000,Async Serial,' ' (0x20)
|
||||
3.481115320000000,Async Serial,3 (0x33)
|
||||
3.481635010000000,Async Serial,' ' (0x20)
|
||||
3.482154700000000,Async Serial,s (0x73)
|
||||
3.482674380000000,Async Serial,e (0x65)
|
||||
3.483194070000000,Async Serial,p (0x70)
|
||||
3.483713760000000,Async Serial,' ' (0x20)
|
||||
3.484233440000000,Async Serial,1 (0x31)
|
||||
3.484753130000000,Async Serial,4 (0x34)
|
||||
3.485272810000000,Async Serial,' ' (0x20)
|
||||
3.485792500000000,Async Serial,j (0x6A)
|
||||
3.486312190000000,Async Serial,o (0x6F)
|
||||
3.486831870000000,Async Serial,k (0x6B)
|
||||
3.487351560000000,Async Serial,e (0x65)
|
||||
3.487871240000000,Async Serial,. (0x2E)
|
||||
3.488390930000000,Async Serial,t (0x74)
|
||||
3.488910620000000,Async Serial,x (0x78)
|
||||
3.489430300000000,Async Serial,t (0x74)
|
||||
3.489949990000000,Async Serial,\r (0x0D)
|
||||
3.490469670000000,Async Serial,\n (0x0A)
|
||||
3.490989360000000,Async Serial,- (0x2D)
|
||||
3.491509050000000,Async Serial,r (0x72)
|
||||
3.492028730000000,Async Serial,w (0x77)
|
||||
3.492548420000000,Async Serial,- (0x2D)
|
||||
3.493068100000000,Async Serial,- (0x2D)
|
||||
3.493587790000000,Async Serial,- (0x2D)
|
||||
3.494107480000000,Async Serial,- (0x2D)
|
||||
3.494627160000000,Async Serial,- (0x2D)
|
||||
3.495146850000000,Async Serial,- (0x2D)
|
||||
3.495666540000000,Async Serial,- (0x2D)
|
||||
3.496186220000000,Async Serial,' ' (0x20)
|
||||
3.496705910000000,Async Serial,r (0x72)
|
||||
3.497225590000000,Async Serial,o (0x6F)
|
||||
3.497745280000000,Async Serial,o (0x6F)
|
||||
3.498264970000000,Async Serial,t (0x74)
|
||||
3.498784650000000,Async Serial,' ' (0x20)
|
||||
3.499304340000000,Async Serial,' ' (0x20)
|
||||
3.499824030000000,Async Serial,' ' (0x20)
|
||||
3.500343710000000,Async Serial,r (0x72)
|
||||
3.500863400000000,Async Serial,o (0x6F)
|
||||
3.501383080000000,Async Serial,o (0x6F)
|
||||
3.501902770000000,Async Serial,t (0x74)
|
||||
3.502422460000000,Async Serial,' ' (0x20)
|
||||
3.502942140000000,Async Serial,' ' (0x20)
|
||||
3.503461830000000,Async Serial,' ' (0x20)
|
||||
3.503981520000000,Async Serial,' ' (0x20)
|
||||
3.504501200000000,Async Serial,' ' (0x20)
|
||||
3.505020890000000,Async Serial,3 (0x33)
|
||||
3.505540570000000,Async Serial,7 (0x37)
|
||||
3.506060260000000,Async Serial,' ' (0x20)
|
||||
3.506579950000000,Async Serial,j (0x6A)
|
||||
3.507099630000000,Async Serial,a (0x61)
|
||||
3.507619320000000,Async Serial,n (0x6E)
|
||||
3.508139000000000,Async Serial,' ' (0x20)
|
||||
3.508658690000000,Async Serial,' ' (0x20)
|
||||
3.509178380000000,Async Serial,5 (0x35)
|
||||
3.509698060000000,Async Serial,' ' (0x20)
|
||||
3.510217750000000,Async Serial,p (0x70)
|
||||
3.510737440000000,Async Serial,a (0x61)
|
||||
3.511257120000000,Async Serial,s (0x73)
|
||||
3.511776810000000,Async Serial,s (0x73)
|
||||
3.512296490000000,Async Serial,w (0x77)
|
||||
3.512816180000000,Async Serial,d (0x64)
|
||||
3.513335870000000,Async Serial,\r (0x0D)
|
||||
3.513855550000000,Async Serial,\n (0x0A)
|
||||
3.514375240000000,Async Serial,- (0x2D)
|
||||
3.514894920000000,Async Serial,r (0x72)
|
||||
3.515414610000000,Async Serial,w (0x77)
|
||||
3.515934300000000,Async Serial,- (0x2D)
|
||||
3.516453980000000,Async Serial,- (0x2D)
|
||||
3.516973670000000,Async Serial,- (0x2D)
|
||||
3.517493350000000,Async Serial,- (0x2D)
|
||||
3.518013040000000,Async Serial,- (0x2D)
|
||||
3.518532730000000,Async Serial,- (0x2D)
|
||||
3.519052410000000,Async Serial,- (0x2D)
|
||||
3.519572100000000,Async Serial,' ' (0x20)
|
||||
3.520091780000000,Async Serial,r (0x72)
|
||||
3.520611470000000,Async Serial,o (0x6F)
|
||||
3.521131160000000,Async Serial,o (0x6F)
|
||||
3.521650840000000,Async Serial,t (0x74)
|
||||
3.522170530000000,Async Serial,' ' (0x20)
|
||||
3.522690220000000,Async Serial,' ' (0x20)
|
||||
3.523209900000000,Async Serial,' ' (0x20)
|
||||
3.523729590000000,Async Serial,r (0x72)
|
||||
3.524249270000000,Async Serial,o (0x6F)
|
||||
3.524768960000000,Async Serial,o (0x6F)
|
||||
3.525288650000000,Async Serial,t (0x74)
|
||||
3.525808330000000,Async Serial,' ' (0x20)
|
||||
3.526328020000000,Async Serial,' ' (0x20)
|
||||
3.526847710000000,Async Serial,' ' (0x20)
|
||||
3.527367390000000,Async Serial,' ' (0x20)
|
||||
3.527887080000000,Async Serial,' ' (0x20)
|
||||
3.528406760000000,Async Serial,' ' (0x20)
|
||||
3.528926450000000,Async Serial,8 (0x38)
|
||||
3.529446140000000,Async Serial,' ' (0x20)
|
||||
3.529965820000000,Async Serial,j (0x6A)
|
||||
3.530485510000000,Async Serial,a (0x61)
|
||||
3.531005200000000,Async Serial,n (0x6E)
|
||||
3.531524880000000,Async Serial,' ' (0x20)
|
||||
3.532044570000000,Async Serial,' ' (0x20)
|
||||
3.532564250000000,Async Serial,1 (0x31)
|
||||
3.533083940000000,Async Serial,' ' (0x20)
|
||||
3.533603630000000,Async Serial,p (0x70)
|
||||
3.534123310000000,Async Serial,e (0x65)
|
||||
3.534643000000000,Async Serial,p (0x70)
|
||||
3.535162680000000,Async Serial,p (0x70)
|
||||
3.535682370000000,Async Serial,e (0x65)
|
||||
3.536202060000000,Async Serial,r (0x72)
|
||||
3.536721740000000,Async Serial,\r (0x0D)
|
||||
3.537241430000000,Async Serial,\n (0x0A)
|
||||
3.537761110000000,Async Serial,\r (0x0D)
|
||||
3.538280800000000,Async Serial,\n (0x0A)
|
||||
3.538800490000000,Async Serial,' ' (0x20)
|
||||
3.539320170000000,Async Serial,R (0x52)
|
||||
3.539839860000000,Async Serial,e (0x65)
|
||||
3.540359540000000,Async Serial,q (0x71)
|
||||
3.540879230000000,Async Serial,u (0x75)
|
||||
3.541398920000000,Async Serial,e (0x65)
|
||||
3.541918600000000,Async Serial,s (0x73)
|
||||
3.542438290000000,Async Serial,t (0x74)
|
||||
3.542957980000000,Async Serial,? (0x3F)
|
||||
3.543477660000000,Async Serial,\r (0x0D)
|
||||
3.543997350000000,Async Serial,\n (0x0A)
|
||||
3.544517030000000,Async Serial,\r (0x0D)
|
||||
3.545036720000000,Async Serial,\n (0x0A)
|
||||
3.545556410000000,Async Serial,> (0x3E)
|
||||
3.546076090000000,Async Serial,> (0x3E)
|
||||
3.546595780000000,Async Serial,' ' (0x20)
|
|
|
@ -0,0 +1,11 @@
|
|||
Welcome to our casino, Riscure Royale! Please enjoy your stay by
|
||||
playing a game, or drink something at our bar. Reach 1000 credits and
|
||||
you will be rewarded with a special prize.
|
||||
|
||||
We have seen loads of cheaters lately, so we have extra guards walking
|
||||
around. Do not feel threatened by them, they will only kick out the
|
||||
people that cheat. Of course, once you earn a lot of money they will
|
||||
start investigating the matter. Better spend some money at our bar if
|
||||
this happens.
|
||||
|
||||
PS. We all know casinos are scams.
|
|
@ -0,0 +1,10 @@
|
|||
We captured a crazy guy aiming a LED at planes passing by. We believe
|
||||
he is a spy from the Republic of Wadiya. Your task is to reverse how
|
||||
the device works and extract the keys without analyzing power or
|
||||
electromagnetic traces.
|
||||
|
||||
Good luck random internet player!
|
||||
|
||||
Note: This challenge can be solved without fancy hardware. You can
|
||||
check if you got the right flag (key) by encrypting the input and
|
||||
comparing it against the output.
|
|
@ -0,0 +1,64 @@
|
|||
|
||||
Elias Öberson @DrAndroid1337 - Nov 8
|
||||
Sorry, I have been offline for 3 days. My provider cancelled my
|
||||
internet subscription by error.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 8
|
||||
I finally hacked the "V2" device. It is not that hard once you know
|
||||
when to inject the glitch. Unfortunately I still don't know how to use
|
||||
it
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 8
|
||||
There is no interface, no menus, no options. Only the "Chip
|
||||
locked. Please write your password:" and then, nothing.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 8
|
||||
Please, retweet this photo to see if somebody knows what this device
|
||||
is.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 9
|
||||
NO! AGAIN!
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 9
|
||||
V3!!! WTF!!!
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 9
|
||||
THIS CANNOT BE A COINCIDENCE! I AM FREAKING OUT!
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 9
|
||||
@Leneko2015, is this one of your jokes? Is this a revenge for the day
|
||||
I triggered your home alarm using the SDR?
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 9
|
||||
@Leneko2015, I am not playing this game anymore.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 11
|
||||
This is weird. I think somebody is following me.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 11
|
||||
OK. He was not following me. Maybe I am paranoid lately.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 12
|
||||
Grand Cheef McAuto released for the Xstation! I need to play it right
|
||||
now
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 15
|
||||
The same guy. Following me!? Or am I just paranoid again?
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 15
|
||||
HE IS REALLY FOLLOWING ME!!!
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 15
|
||||
I went to the police. They don't believe me. They said I am paranoid
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 15
|
||||
Is this all related? The USB devices, the strange phone calls, the
|
||||
guy. Two days ago I thought there was somebody behind my door.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 16
|
||||
I am trying to hack the "V3" device. A password again, but I cannot
|
||||
bypass it like last time.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 18
|
||||
I am not feeling safe anymore. Too many things are happening. I am
|
||||
going out the city for few days. I take the USB device with me
|
|
@ -0,0 +1,25 @@
|
|||
Elias Öberson @DrAndroid1337 - Nov 1
|
||||
|
||||
Walking around the financial district, I stumbled upon this strange
|
||||
device. Does anybody know what it is?
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 1
|
||||
|
||||
It does not have any recognisable logos or marks, only the letters
|
||||
"V1" written on one side and a USB connector on the other. Here is a
|
||||
photo.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 1
|
||||
|
||||
It probably is some kind of memory, but it has an unusual design. I
|
||||
will check it when I arrive home.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 1
|
||||
|
||||
I finally arrived home. I connected the USB device to my computer, but
|
||||
it looks that it is permanently locked.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 1
|
||||
|
||||
Now I am curious about the device and its content. Would I be able to
|
||||
unlock it using FI?
|
|
@ -0,0 +1,35 @@
|
|||
Elias Öberson @DrAndroid1337 - Nov 2
|
||||
I hacked this device! I unlocked it!
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 2
|
||||
It was easy to break this strange device, but unfortunately I don't
|
||||
understand how it works. It doesn't seem to do anything. Any
|
||||
suggestion?
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 3
|
||||
Again! I found a similar device in the street! Who is the fool that
|
||||
keeps losing these "pendrives"!?
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 3
|
||||
It looks the same but now it has a "V2" mark. There is nothing good on
|
||||
TV tonight so I will take a look at this.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 3
|
||||
It's not locked! That's good! Maybe I can find what it
|
||||
does. Unfortunately it asks for a password but I think I can bypass it
|
||||
using FI again.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 4
|
||||
The "V1" was very easy to break but this one... A couple of hours
|
||||
already and still nothing.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 4
|
||||
OK! It's 3AM. I think I will continue tomorrow.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 4
|
||||
I cannot sleep. Somebody keeps calling my landline. They do not say
|
||||
anything but I can hear them breathing.
|
||||
|
||||
Elias Öberson @DrAndroid1337 - Nov 4
|
||||
I disconnected the phone but the moron has my mobile! I am sure it is
|
||||
@Leneko2015, bored at home.
|
BIN
Rhme-2016-master/challenges/binaries/jumpy/jumpy.bin
Normal file
BIN
Rhme-2016-master/challenges/binaries/jumpy/jumpy.bin
Normal file
Binary file not shown.
|
@ -0,0 +1,6 @@
|
|||
We really need access to this lab protected with an Arduino-based
|
||||
access control system. Our operatives obtained a flash dump from a
|
||||
non-personalized engineering sample, but we are having trouble reverse
|
||||
engineering it.
|
||||
|
||||
Can you help us get the password to get through?
|
|
@ -0,0 +1,8 @@
|
|||
We have received a portable asymmetric key storage for evaluation
|
||||
purposes. This portable device was manufactured by Ebian Corp to
|
||||
facilitate secure communications with customers. It generates and
|
||||
stores adminstrators' public keys. Customers can use this repository
|
||||
to find the public key of the admin they want to contact, and
|
||||
administrators can use this repository to update their key
|
||||
information. If this fancy keychain passes the test we are going to
|
||||
give them away like candy, secure candy.
|
|
@ -0,0 +1,10 @@
|
|||
We have recently been informed that a group of hackers exploited a
|
||||
vulnerability in a PC within another very secure network. Our
|
||||
operative says the hacker in charge took a snapshot of the password,
|
||||
which they stored in their secret hidden-away database.
|
||||
|
||||
Today we found a photo manager service running on the internet. This
|
||||
service can be linked to the hacker who retrieved the passwords. From
|
||||
the size of the photo manager we can see they stored lots of pictures,
|
||||
so we are hoping they stored the password on their photo manager
|
||||
too. Can you breach their photo manager and take a quick look?
|
|
@ -0,0 +1,6 @@
|
|||
This is an easy SCA challenge using a cipher implementation without
|
||||
any SCA or DFA countermeasures. Find the key used to encrypt and
|
||||
decrypt messages. Please, consider both SCA and DFA attacks.
|
||||
|
||||
To encrypt a message, send the letter 'e' followed of 16 bytes. To
|
||||
decrypt a message, send the letter 'd' followed of 16 bytes.
|
3
Rhme-2016-master/challenges/binaries/scalate/scalate.txt
Normal file
3
Rhme-2016-master/challenges/binaries/scalate/scalate.txt
Normal file
|
@ -0,0 +1,3 @@
|
|||
We added even more countermeasures.
|
||||
|
||||
Good luck!
|
|
@ -0,0 +1,12 @@
|
|||
We managed to capture a group of spies at our premises. Our
|
||||
specialists in enhanced interrogation techniques worked through the
|
||||
entire night but did not manage to retrieve any information.
|
||||
|
||||
Luckily, we intercepted the spy as they were trying to chew and
|
||||
swallow the Arduino Nano device that they were carrying in their
|
||||
pocket. The device is protected with a password and the Pure Software
|
||||
Exploitation Team applied all the tricks they have but did not find
|
||||
any way to guess the secret password.
|
||||
|
||||
Can you find the correct password and get the secret data stored on
|
||||
the device?
|
|
@ -0,0 +1,3 @@
|
|||
We added a simple countermeasure to the previous challenge.
|
||||
|
||||
Will you be able to break it?
|
|
@ -0,0 +1,6 @@
|
|||
Who doesn't like a classic game of whac-the-mole? This time the moles
|
||||
infiltrated deep into the backyard of a poor farmer's family. The
|
||||
moles are ruining the crops, which the farmer desperately needs to
|
||||
provide for his wife and 2 children. Any traveler able to help him by
|
||||
extinguishing the darn things will be greatly rewarded. Are you up for
|
||||
the task?
|
Loading…
Add table
Add a link
Reference in a new issue