Information#
Version#
By | Version | Comment |
---|---|---|
noraj | 1.0 | Creation |
CTF#
- Name : Juniors CTF 2016
- Website : juniors.ctf.org.ru
- Type : Online
- Format : Jeopardy
- CTF Time : link
Description#
categories: network, joy, admin
#hint for task with jabber: try to use another clients because clients works differently with anonymous auth.
Solution#
1 | $ echo dipper lo-o-ssE-bo |tr ipodlEsb- ab0j1328. |
with pidgin & wireshark
- domain: 10.0.223.80
- server: 10.0.223.80
change domaine to: mystery-hack.gravity.falls
- domain: mystery-hack.gravity.falls
- server: 10.0.223.80
Pidgin can't be used because it doesn't support anonymous connection.
Use Profanity instead:
1 | /connect anonymous@mystery-hack.gravity.falls server 10.0.223.80 |
Some people are connected:
1 | dipper@mystery-hack.gravity.falls |
Let's talk to dipper@mystery-hack.gravity.falls
:
1 | /msg dipper@mystery-hack.gravity.falls hello |
He told us:
- Russian:
Я очень смышленый парень. Но сейчас не понимаю ни слова.
- English:
I am very clever guy. But now I do not understand a word.
We talked to stand
:
- Russian:
Это ты что сейчас сказал? Всегда четко формулируй, что тебе надо. Ты что, русского языка не понимаешь. Тогда тебе сюда: ru2en@bot.talk.google.com
- English:
That's what you have just said that? Always articulate what you need. What, you do not understand the Russian language. Then you here: ru2en@bot.talk.google.com
Admins said us that ru2en@bot.talk.google.com
doesn't work and we need to use Google Translate and speak to dipper@mystery-hack.gravity.falls
in russian only.
We tried to invite him in a room but he didn't want to come in:
1 | /join |
We tried to get some infos about him:
1 | /info dipper@mystery-hack.gravity.falls |
We checked upload:
1 | /sendfile /etc/hosts |
We added him in contact, check if he had a pgp public key, wanted to subscribe to his presence and allow him to see ours, but it seems he doesn't want to be our friend:
1 | /roster add dipper@mystery-hack.gravity.falls |
Last activity requests are forbidden:
1 | /lastactivity dipper@mystery-hack.gravity.falls |
Someone in the Telegram chat talked about mabel
, so we tried:
1 | /msg mabel@mystery-hack.gravity.falls hello |
He said us:
- russian:
Не понимаю, чего вы хотите? Я богиня разрушения!
- english:
I do not know what you want? I am the goddess of destruction!
Try to list rooms again, this times it works:
1 | /rooms |
We joined hall (/join hall
), there is some users:
- Moderators: stan
- Participants: dipper, Gideon, mabel, soos, wendy
- Visitors: ctf players I suppose
We talked to soos:
- russian:
Чувак, я тебя не понимаю. Хотя мудрость - мое благословение и проклятие.
- english:
Dude, I do not understand you. Although wisdom - my blessing and a curse.
When we talk, giving only keywords, nobody understand us so let's try some complete sentences:
To stan:
1 | Me: |
To soos:
1 | Me: |
Ok so let's talk to dipper:
1 | Me: |
Let's try wendy:
1 | Me: |
mabel:
1 | Me: |
waddles:
1 | Me: |
And 骨架
in chinese means skeleton
.
We must submit the flag in chinese, not in english.
Note: Jabber server was very unstable and we get a lot of Lost connection. messages. So we used /reconnect 1
.
Feedback: russian content everywhere, taht's pain for non-russian people, use english only. No flag format, flag are meaningless so it may be hard to know when you get the flag or not, they need to use a flag format or give in the description what the flag have to look like. This was a joy only challenge, there is no security in this challenge, so that must not be in a CTF or that should give very few points.