Skip to content

t474-r0b07/ctf-writeups

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 

History

139 Commits
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

 β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—
β–ˆβ–ˆβ•”β•β•β•β•β•β•šβ•β•β–ˆβ–ˆβ•”β•β•β•β–ˆβ–ˆβ•”β•β•β•β•β•
β–ˆβ–ˆβ•‘        β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—  
β–ˆβ–ˆβ•‘        β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•”β•β•β•  
β•šβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—   β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘     
 β•šβ•β•β•β•β•β•   β•šβ•β•   β•šβ•β•     
    β–ˆβ–ˆβ•—    β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•—   β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—
    β–ˆβ–ˆβ•‘    β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘β•šβ•β•β–ˆβ–ˆβ•”β•β•β•β–ˆβ–ˆβ•”β•β•β•β•β•β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—β–ˆβ–ˆβ•”β•β•β•β•β•
    β–ˆβ–ˆβ•‘ β–ˆβ•— β–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•”β•β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—  β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•”β•β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—
    β–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•”β•β•β•  β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β•β• β•šβ•β•β•β•β–ˆβ–ˆβ•‘
    β•šβ–ˆβ–ˆβ–ˆβ•”β–ˆβ–ˆβ–ˆβ•”β•β–ˆβ–ˆβ•‘  β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β•šβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•”β•β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•‘
     β•šβ•β•β•β•šβ•β•β• β•šβ•β•  β•šβ•β•β•šβ•β•   β•šβ•β•   β•šβ•β•β•β•β•β•β• β•šβ•β•β•β•β•β• β•šβ•β•     β•šβ•β•β•β•β•β•β•
$ whoami
> t474_r0b07

$ cat /etc/mission
> n0 3st0y 4qu1 p4r4 d4rt3 l4 fl4g.
> 3st0y 4qu1 p4r4 m0str4rt3 c0m0 p3ns3 p4r4 ll3g4r 4 3ll4.

$ echo $REPO
> [πŸ”΄ LIVE] writeups Β· errores incluidos Β· en espaΓ±ol

> cat manifesto.txt

this is not a solution repo.

  the 2-hour rabbit holes.         ← those are in here.
  the hypotheses that blew up.     ← those too.
  the exact moment it clicked.     ← especially those.

if you want copy-paste β†’  wrong repo.

if something in your head says
  you can go further β€”
    keep reading.

> ls -la writeups/

PLATFORM              STATUS           NOTES
────────────────────  ───────────────  ─────────────────────────────
0verTh3W1re/
  β”œβ”€ 🟒 B4nd1t/       βœ… [34/34]       d0ne. n0 l00k1ng b4ck.
  β”œβ”€ 🟒 L3v14th4n/    βœ… [08/08]       d0ne. s4me.
  β”œβ”€ 🟒 N4rn14/       βœ… [12/12]       st4ck. h34p. 3ntr0n0. d0ne.
  └─ πŸ”΄ B3h3m0th/     [00/??]          // n3xt t3rr1t0ry. unkn0wn d3pth.

p1c0CTF/
  β”œβ”€ πŸ”΄ f0r3ns1cs     easy   [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ] 100%
  β”œβ”€ 🟑 f0r3ns1cs     medium [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–‘β–‘]  80%
  └─ 🟠 f0r3ns1cs     hard   [β–ˆβ–ˆβ–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘]  20%

πŸ”΄ TryH4ckM3/         [β–ˆβ–ˆβ–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘] active  Β·  10 wr1t3ups l1v3
πŸ• H4ckTh3B0x/        [β–ˆβ–ˆβ–ˆβ–‘β–‘β–‘β–‘β–‘β–‘β–‘] active  Β·  35% Β· blu3t34m
❓ [R3D4CT3D]/         // ?????????          β†’ github.com/t474-r0b07/t474

> cat methodology.txt

+ every writeup Β· same map Β· always:

  [RECON]       what I saw first
  [HYPOTHESIS]  what I thought it was
  [ATTEMPTS]    what I tried. what failed. all of it.
  [BREAK]       the exact moment it clicked
  [FLAG]        the result
  [REFLECTION]  what I'd do differently

- [ATTEMPTS] is where the real learning lives.
- not in the flag.
- n3v3r 1n th3 fl4g.

> ./t00lk1t.sh

[+] loading tools...

  πŸ” RECON    ──→  nmap Β· gobuster Β· ffuf Β· whatweb Β· ltrace
  πŸ–ΌοΈ  ST3G     ──→  binwalk Β· steghide Β· exiftool Β· strings Β· xxd
  πŸ” CRYPT0   ──→  CyberChef Β· hashcat Β· john Β· openssl
  🌐 W3B      ──→  burpsuite Β· curl Β· wfuzz Β· sqlmap
  πŸ’₯ B1N4RY   ──→  gdb Β· pwntools Β· python3 Β· objdump
  πŸ› οΈ  M1SC     ──→  netcat Β· wireshark Β· tcpdump

[+] t00ls l04d3d.
[+] l3t's g0. πŸ”΄

> tail -f progress.log

🟒  OTW  Bandit      [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ] done    Β·  34 levels
🟒  OTW  Leviathan   [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ] done    Β·  8 levels
🟒  OTW  Narnia      [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆ] done    Β·  12 levels Β· st4ck Β· h34p Β· 3nv
πŸ”΄  OTW  Behemoth    [β–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘] 00/??   Β·  // initializing...
πŸ”΄  picoCTF          [β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–‘β–‘] active  Β·  forensics
πŸ”΄  TryHackMe        [β–ˆβ–ˆβ–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘] active  Β·  10 writeups live
πŸ•  HackTheBox       [β–ˆβ–ˆβ–ˆβ–‘β–‘β–‘β–‘β–‘β–‘β–‘] active  Β·  35% Β· blueteam
⚠️   CVE              [β–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘β–‘] endgame ←←←

> cat origin.txt

it all started with a book.
a cipher. a shift of 3.

    BNMSDMSN CD BNMNBDQRD

that was the first lock I ever opened.
I didn't know I'd spend the rest of my time
  looking for more locks.

  this repo is what came after.

> echo $SIGNAL

$ echo $MINDSET
> the flag was never the point.
> the point is knowing you could get it.

$ echo $LOGIC
> m1 l0g1c 1s und3n14bl3.

> tail -n 1 /var/log/sys.log

[β™Ÿ] 49 74 20 69 73 20 6e 6f 74 20 61 62 6f 75 74
    20 74 68 65 20 64 65 73 74 69 6e 61 74 69 6f 6e
    2e 20 49 74 20 69 73 20 61 62 6f 75 74 20 74 68
    65 20 77 61 79 20 79 6f 75 20 6d 6f 76 65 2e

// h3ll0 fr13nd β€” 1f y0u f0und th1s, y0u w3r3 l00k1ng
β–ˆβ–ˆβ•—  β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•—     β–ˆβ–ˆβ•—      β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—
β–ˆβ–ˆβ•‘  β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β•β•β•β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•”β•β•β•β–ˆβ–ˆβ•—
β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—  β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘
β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β•  β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•‘   β–ˆβ–ˆβ•‘
β–ˆβ–ˆβ•‘  β–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β•šβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•”β•
β•šβ•β•  β•šβ•β•β•šβ•β•β•β•β•β•β•β•šβ•β•β•β•β•β•β•β•šβ•β•β•β•β•β•β• β•šβ•β•β•β•β•β•

β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•— β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ•—   β–ˆβ–ˆβ•—β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—
β–ˆβ–ˆβ•”β•β•β•β•β•β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β•β•β•β–ˆβ–ˆβ–ˆβ–ˆβ•—  β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—
β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—  β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•”β•β–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—  β–ˆβ–ˆβ•”β–ˆβ–ˆβ•— β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘  β–ˆβ–ˆβ•‘
β–ˆβ–ˆβ•”β•β•β•  β–ˆβ–ˆβ•”β•β•β–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•”β•β•β•  β–ˆβ–ˆβ•‘β•šβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘  β–ˆβ–ˆβ•‘
β–ˆβ–ˆβ•‘     β–ˆβ–ˆβ•‘  β–ˆβ–ˆβ•‘β–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•—β–ˆβ–ˆβ•‘ β•šβ–ˆβ–ˆβ–ˆβ–ˆβ•‘β–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ–ˆβ•”β•
β•šβ•β•     β•šβ•β•  β•šβ•β•β•šβ•β•β•šβ•β•β•β•β•β•β•β•šβ•β•  β•šβ•β•β•β•β•šβ•β•β•β•β•β•

// y0u kn0w wh0 s41d th1s f1rst.
// th3 0n3s wh0 s33 th1ngs d1ff3r3ntly
// 4r3 th3 0n3s wh0 br34k th1ngs d1ff3r3ntly.

// l1v3 pr0c3ss Β· 3sp4Γ±0l Β· m1st4k3s 1nclud3d β†’ youtube.com/@t474-r0b07

Releases

No releases published

Packages

 
 
 

Contributors