" }.join 43 | end 44 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f100/f100_fb8149b6f6eaef95d38.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.defcon19-quals/f100/f100_fb8149b6f6eaef95d38.png -------------------------------------------------------------------------------- /2011.defcon19-quals/f100/fix_crc.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | require 'zlib' 3 | 4 | data = File.read(ARGV[0]) 5 | 6 | data.force_encoding('ascii-8bit') 7 | 8 | crc = Zlib::crc32(data[0x0c,0x0d+4]) 9 | 10 | p data[0x1d,4] 11 | 12 | data[0x1d] = (crc>>24).chr 13 | data[0x1e] = ((crc>>16)&0xff).chr 14 | data[0x1f] = ((crc>>8)&0xff).chr 15 | data[0x20] = (crc&0xff).chr 16 | 17 | p data[0x1d,4] 18 | 19 | File.open(ARGV[0],'w') do |f| 20 | f << data 21 | end 22 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f100/fix_size.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | require 'zlib' 3 | 4 | data = File.read(ARGV[0]) 5 | 6 | data.force_encoding('ascii-8bit') 7 | 8 | width = ARGV[1].to_i 9 | height = 19025 / width 10 | 11 | def put data, start, value 12 | data[start+0] = (value>>24).chr 13 | data[start+1] = ((value>>16)&0xff).chr 14 | data[start+2] = ((value>>8)&0xff).chr 15 | data[start+3] = (value&0xff).chr 16 | end 17 | 18 | put data, 0x10, width 19 | put data, 0x14, height 20 | 21 | crc = Zlib::crc32(data[0x0c,0x0d+4]) 22 | 23 | p data[0x1d,4] 24 | 25 | put data, 0x1d, crc 26 | 27 | p data[0x1d,4] 28 | 29 | File.open(ARGV[0],'w') do |f| 30 | f << data 31 | end 32 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/README: -------------------------------------------------------------------------------- 1 | образ PDF эксплоита для jailbreak-а айфона 2 | 3 | 1. находим оригинальный PDF jailbreak (JailBreakMe) 4 | 2. распаковываем оба образа ФС 5 | 3. удаляем одинаковые файлы из ddtek-овского 6 | 4. получаем файл /usr/bin/dd 7 | 5. strings -> кучка больших чисел вида 109868682..........8322997248.000000 8 | 6. конвертим во float и каким-то образом смотрим их binary representation 9 | 7. "DDTEKJailbreaksarethemostbestest" 10 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/bin/dd: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.defcon19-quals/f400/bin/dd -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/bin/decode.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | data = File.read('strings').strip.gsub(/\.0+$/,'').split("\n") 3 | sum = 0 4 | data.map! do |row| 5 | # puts row 6 | sum += row.to_i 7 | # puts row.to_i.to_s(2).sub(/0+$/,'') 8 | x = row.to_i.to_s(16)[0..13] 9 | # puts x 10 | x 11 | end 12 | 13 | #exit 14 | 15 | #puts 16 | #puts "[.] sum = #{sum}" 17 | #puts 18 | 19 | #data << sum.to_s 20 | 21 | data[0] = (data[0].to_i(16) << 1).to_s(16) 22 | data[2] = (data[2].to_i(16) << 1).to_s(16) 23 | 24 | r = '' 25 | data.each do |row| 26 | s = '' 27 | # puts row 28 | 0.step(row.size,2) do |i| 29 | char = row[i,2] 30 | # p char 31 | next if char == "" || char == "0" 32 | s = char.to_i(16).chr + s 33 | end 34 | p s 35 | r << s 36 | end 37 | p r 38 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/bin/strings: -------------------------------------------------------------------------------- 1 | 41358753080588780315500696417148503196370008505043360338644939021284539327654424368206170740213813076058322365516034006270625614745638277215965686397551374257625369654940618745555501980517665488240640.000000 2 | 273020167277193934342483321951392739131140631949880731514555218503200924051802886516416983650292597201352459748672990971210795734498587443982103979231419127824384.000000 3 | 109868682199889090983893607446542759799370795099978204527886814871815275332732684149782782932243583477726231807149879389352427825978796531514954916754473975757796372140255258111985922092457311221042226817127194804092923531694479704498641458322997248.000000 4 | 8887824086628450300085222950423508459269193936749714415660759918033307608850811297588582757614917095982291010098451602122996273175590810261747631678220597664532468741350897995232883808808537964727011624779797357169712195651789942060581116921485444775936.000000 5 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/rm_md5.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/ruby 2 | require 'digest/md5' 3 | 4 | sums = {} 5 | 6 | `find wad_jailbreakme -type f`.split("\n").each do |fname| 7 | sum = Digest::MD5.hexdigest(File.read(fname)) 8 | sums[sum] = 1 9 | end 10 | 11 | `find wad_ddtek -type f`.split("\n").each do |fname| 12 | sum = Digest::MD5.hexdigest(File.read(fname)) 13 | if sums[sum] 14 | puts "rm #{fname}" 15 | File.unlink fname 16 | end 17 | end 18 | -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/wad_ddtek.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.defcon19-quals/f400/wad_ddtek.bin -------------------------------------------------------------------------------- /2011.defcon19-quals/f400/wad_jailbreakme.bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.defcon19-quals/f400/wad_jailbreakme.bin -------------------------------------------------------------------------------- /2011.hacklu/100.python.crackme/brute.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | 3 | STDOUT.sync = true 4 | 5 | def check a,d,e,f,i 6 | return if 3*a + 12*d + e + 4*f + 6*i != 2194 7 | return if -6*a + 2*d - 4*e - f + 9*i != -243 8 | return if a + 6*d + 2*e + 7*f +11*i != 2307 9 | return if 5*a - 2*d - 7*e +76*f + 8*i != 8238 10 | return if 2*a - 2*d - 2*e - 2*f + 2*i != -72 11 | puts [a,0,0,d,e,f,0,0,i].join(' ') 12 | end 13 | 14 | 15 | while(true) do 16 | check rand(256), rand(256), rand(256), rand(256), rand(256), 17 | end 18 | 19 | puts "[.] rand fail" 20 | 21 | 0.upto(255) do |a| 22 | 0.upto(255) do |d| 23 | 0.upto(255) do |e| 24 | 0.upto(255) do |f| 25 | 0.upto(255) do |i| 26 | check a,d,e,f,i 27 | end 28 | end 29 | end 30 | end 31 | end 32 | -------------------------------------------------------------------------------- /2011.hacklu/100.python.crackme/crackme.pyc: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/100.python.crackme/crackme.pyc -------------------------------------------------------------------------------- /2011.hacklu/100.python.crackme/solve.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | 3 | class String 4 | def xor x 5 | if x.is_a?(String) 6 | r = '' 7 | j = 0 8 | 0.upto(self.size-1) do |i| 9 | r << (self[i].ord^x[j].ord).chr 10 | j+=1 11 | j=0 if j>= x.size 12 | end 13 | r 14 | else 15 | r = '' 16 | 0.upto(self.size-1) do |i| 17 | r << (self[i].ord^x).chr 18 | end 19 | r 20 | end 21 | end 22 | end 23 | 24 | s = "\x0fp4$-\x064l?\x06 o!h\x17t3`\x10" 25 | 0.upto(255) do |x| 26 | s1 = s.xor(x) 27 | p s1 if s1[/^[\x20-\x7f]+$/] 28 | end 29 | -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/0_mario.nes: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/100.scotty.last.signal+/0_mario.nes -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/1.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | 3 | # get roms from http://www.emu-land.net/consoles/dendy/roms/top 4 | 5 | Dir['orig/*.nes'].each do |fname| 6 | system %Q|fc.rb "#{fname}" mario.nes > "#{fname}.fc"| 7 | end 8 | -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/2_original_game.nes: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/100.scotty.last.signal+/2_original_game.nes -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/3_fc2bin.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | data = File.read(ARGV[0]).strip. 3 | split("\n"). 4 | map{ |x| x.split(' ')[2] }. 5 | map{ |x| x.to_i(16).chr }. 6 | join 7 | print data 8 | -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/4_bin: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/100.scotty.last.signal+/4_bin -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/5_add.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | 3 | class String 4 | def add x 5 | r = '' 6 | 0.upto(self.size-1) do |i| 7 | begin 8 | r << (self[i].ord+x).chr 9 | rescue RangeError 10 | r << self[i].chr 11 | end 12 | end 13 | r 14 | end 15 | end 16 | 17 | data = File.read('4_bin').force_encoding('binary') 18 | -255.upto(255).each do |x| 19 | r=data.add(x) 20 | puts r if r['HELP'] 21 | end 22 | -------------------------------------------------------------------------------- /2011.hacklu/100.scotty.last.signal+/ANSWER: -------------------------------------------------------------------------------- 1 | IAMSTILLALIVEHELPME 2 | -------------------------------------------------------------------------------- /2011.hacklu/150.borg.binary/README: -------------------------------------------------------------------------------- 1 | дан бинарник borgbinary 2 | он читает из stdout 4 байта, считает от них MD5 3 | и пытается выполнить то что получилось как код внутри себя. 4 | 5 | NOT SOLVED 6 | -------------------------------------------------------------------------------- /2011.hacklu/150.borg.binary/borgbinary: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/150.borg.binary/borgbinary -------------------------------------------------------------------------------- /2011.hacklu/150.borg.binary/gen.rb: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env ruby 2 | require 'timeout' 3 | require 'digest/md5' 4 | 5 | TBL = ("\x21".."\x7e").to_a.join 6 | p TBL 7 | 8 | puts "[.] #{TBL.size} chars" 9 | 10 | s="____" 11 | 0.upto(TBL.size-1) do |i| 12 | s[0] = TBL[i] 13 | 0.upto(TBL.size-1) do |j| 14 | s[1] = TBL[j] 15 | 0.upto(TBL.size-1) do |k| 16 | s[2] = TBL[k] 17 | 0.upto(TBL.size-1) do |l| 18 | s[3] = TBL[l] 19 | print "\r#{s}" 20 | r = nil 21 | begin 22 | Timeout::timeout(1) { r = system("./borgbinary", s) } 23 | rescue Timeout::Error 24 | end 25 | if r 26 | puts "[*] #{s.inspect} #{Digest::MD5.hexdigest(s)}" 27 | end 28 | end 29 | end 30 | end 31 | end 32 | 33 | -------------------------------------------------------------------------------- /2011.hacklu/150.borg.binary/hash.c: -------------------------------------------------------------------------------- 1 | #include
.+<\/pre>/mi].
29 | sub(//i,'').
30 | sub(/<\/pre>/i,'').
31 | strip
32 |
33 | puts data1[0,64].xor(data2)
34 |
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/0_8c4f14e28155a2c3cf4b2538c1e0958b.jpg:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/0_8c4f14e28155a2c3cf4b2538c1e0958b.jpg
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/1_analyze_jpeg:
--------------------------------------------------------------------------------
1 | look for "0xFF 0xD9" JPEG EOF mark
2 | => found data after mark
3 | => unzip filename.jpg
4 | => got 9 chunks (see chunks subdir)
5 |
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/2_manually_guess_chunk_order.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 | STDOUT.sync = true
3 |
4 | if ARGV.size == 0
5 | raise "gimme at least one chunk filename"
6 | end
7 |
8 | b0 = "\x80"*8
9 | b1 = "\x27\x01\x27\x80\xd9\xff\xd9\x80"
10 |
11 | data = ARGV.map{ |x| File.read(x) }.join.force_encoding('binary')
12 | if data[0,4] == 'RIFF'
13 | data = data[44..-1]
14 | end
15 |
16 | N=120
17 |
18 | b0 = b0*N
19 | b1 = b1*N
20 |
21 | r = ''
22 | 0.step(data.size-1,b0.size) do |i|
23 | case (d=data[i,b0.size])
24 | when b0
25 | print "."
26 | r << '0'
27 | when b1
28 | print "#"
29 | r << '1'
30 | else
31 | raise "SYNC ERROR" if d.size == b0.size
32 | raise "NOT ENOUGH DATA #{d.size}/#{b0.size}"
33 | raise "unknown #{d.size} (normal: #{b0.size}) bytes of data #{d.split('').map{|x| "%02x " % x.ord}.join}"
34 | end
35 | end
36 |
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/3_decode.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 |
3 | STDOUT.sync = true
4 |
5 | b0 = "\x80"*8
6 | b1 = "\x27\x01\x27\x80\xd9\xff\xd9\x80"
7 |
8 | data = Dir['chunks/chunk*'].sort.map{ |x| File.read(x).force_encoding('binary') }.join
9 | if data[0,4] == 'RIFF'
10 | data = data[44..-1]
11 | end
12 |
13 | N=120
14 |
15 | b0 = b0*N
16 | b1 = b1*N
17 |
18 | r = ''
19 | n = 0
20 | 0.step(data.size-1, b0.size) do |i|
21 | case (d=data[i,b0.size])
22 | when b0
23 | print "."
24 | r << '.'
25 | when b1
26 | print "#"
27 | r << '#'
28 | else
29 | raise "SYNC ERROR" if d.size == b0.size
30 | raise "NOT ENOUGH DATA #{d.size}/#{b0.size}"
31 | raise "unknown #{d.size} (normal: #{b0.size}) bytes of data #{d.split('').map{|x| "%02x " % x.ord}.join}"
32 | end
33 | n += 1
34 | # puts if n%24==0
35 | end
36 |
37 | require 'morse'
38 |
39 | puts
40 | puts Morse.decode(r.gsub('......'," ").gsub('######','-').gsub('.','').gsub('##','.'))
41 |
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/ANSWER:
--------------------------------------------------------------------------------
1 | Pheikyos
2 |
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.0.uvlSlG3Tgow:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.0.uvlSlG3Tgow
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.1.5IIUED7GheR:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.1.5IIUED7GheR
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.2.rySOWi4fZkA:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.2.rySOWi4fZkA
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.3.87F1s5POUJc:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.3.87F1s5POUJc
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.4.6JXtwsTTh9k:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.4.6JXtwsTTh9k
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.5.Uw105aD3qYh:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.5.Uw105aD3qYh
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.6.BPiIOASG_Z6:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.6.BPiIOASG_Z6
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.7.Yui5oq58hlx:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.7.Yui5oq58hlx
--------------------------------------------------------------------------------
/2011.hacklu/200.unknown.planet+/chunks/chunk.8.nLPA8X0UJqf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/200.unknown.planet+/chunks/chunk.8.nLPA8X0UJqf
--------------------------------------------------------------------------------
/2011.hacklu/250.romulan.business.network/Gwl4U5fqQZlJxEpPlgFL0hRNQrG4mmhg.pdf:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/250.romulan.business.network/Gwl4U5fqQZlJxEpPlgFL0hRNQrG4mmhg.pdf
--------------------------------------------------------------------------------
/2011.hacklu/300.antique.space.shuttle+/exploit_sources.zip:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/300.antique.space.shuttle+/exploit_sources.zip
--------------------------------------------------------------------------------
/2011.hacklu/300.antique.space.shuttle+/remote_homedir/auth:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/300.antique.space.shuttle+/remote_homedir/auth
--------------------------------------------------------------------------------
/2011.hacklu/300.antique.space.shuttle+/remote_homedir/info:
--------------------------------------------------------------------------------
1 | Ok so you got access, now try to get more privileges by exploiting
2 | the auth protocol. you can login to ssh at port 2004
3 | with user:user4422
4 |
--------------------------------------------------------------------------------
/2011.hacklu/300.deathstar.escape+/sample.mp3:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.hacklu/300.deathstar.escape+/sample.mp3
--------------------------------------------------------------------------------
/2011.hacklu/300.deathstar.escape+/save_mp3.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 | require 'open-uri'
3 |
4 | while true do
5 | r = `echo foo | nc ctf.hack.lu 2007`
6 | r.force_encoding 'binary'
7 | r.sub!(/010 Welcome, stranger\. Please prove that you are human\s*/m,'')
8 | puts r.size
9 | tags = r.scan(/tag[a-z0-9]*/i)
10 | p tags
11 |
12 | File.open 'data.mp3','w' do |f|
13 | f<
5 | decode it with Ascii85 => I_L0v3_D0kdo
6 |
--------------------------------------------------------------------------------
/2011.isec/q02+/dokdo.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q02+/dokdo.png
--------------------------------------------------------------------------------
/2011.isec/q02+/time_machine.bat:
--------------------------------------------------------------------------------
1 | @echo off
2 | :1
3 | time 19:00:00
4 | goto 1
--------------------------------------------------------------------------------
/2011.isec/q06+/answer:
--------------------------------------------------------------------------------
1 | IsEC3352217852
2 | pAsswOrD Is : w0wH5C6Er
3 |
--------------------------------------------------------------------------------
/2011.isec/q09+/README:
--------------------------------------------------------------------------------
1 | 1. Открываем lol.pcap в wireshark
2 | 2. follow UDP stream
3 | 3. важно выбрать только одно направление потока! иначе будет треск
4 | 4. save to file
5 | 5. audacious -> import raw file -> a-Law 8000 Hz
6 |
--------------------------------------------------------------------------------
/2011.isec/q09+/del.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 | data = File.read(ARGV[0]).force_encoding('binary')
3 |
4 | File.open(ARGV[1],'w') do |f|
5 | f << data.
6 | gsub(/\x80[\x08\x88]..../m,'').
7 | gsub(/\x00+/m,'').
8 | gsub(/...bC/m,'').
9 | gsub(/..2x../m,'').
10 | # gsub(/\xd5/m,'').
11 | gsub(/\x00/m,'')
12 | end
13 |
--------------------------------------------------------------------------------
/2011.isec/q09+/dump.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 |
3 | puts ""
4 | puts ""
5 |
6 | data = File.read(ARGV[0]).force_encoding('binary')
7 | (0..10000).each do |i|
8 | puts ""
9 | end
10 |
--------------------------------------------------------------------------------
/2011.isec/q09+/lol.pcap:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/lol.pcap
--------------------------------------------------------------------------------
/2011.isec/q09+/repl.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 | data = File.read ARGV[0]
3 | data.force_encoding 'binary'
4 |
5 | s1 = "\xd5".force_encoding('binary')
6 | s2 = "\x00".force_encoding('binary')
7 |
8 | data.tr! s1,s2
9 | #data.tr! "\x55",""
10 |
11 | File.open(ARGV[1],'w'){ |f| f << data }
12 |
--------------------------------------------------------------------------------
/2011.isec/q09+/result.wav:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/result.wav
--------------------------------------------------------------------------------
/2011.isec/q09+/s1:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/s1
--------------------------------------------------------------------------------
/2011.isec/q09+/s1.del:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/s1.del
--------------------------------------------------------------------------------
/2011.isec/q09+/s2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/s2
--------------------------------------------------------------------------------
/2011.isec/q09+/s2.del:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/s2.del
--------------------------------------------------------------------------------
/2011.isec/q09+/test2:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.isec/q09+/test2
--------------------------------------------------------------------------------
/2011.ructf-quals/cry300/0_cry300.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/cry300/0_cry300.png
--------------------------------------------------------------------------------
/2011.ructf-quals/cry300/1_cry300_deblock_rgb.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/cry300/1_cry300_deblock_rgb.png
--------------------------------------------------------------------------------
/2011.ructf-quals/cry300/4_b64_to_spl.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 |
3 | class String
4 | def revert2!
5 | 0.step(self.size-2,2) do |i|
6 | self[i+1],self[i] = self[i],self[i+1]
7 | end
8 | self
9 | end
10 | end
11 |
12 | puts File.read(ARGV[0]).unpack('m*')[0].revert2!
13 |
--------------------------------------------------------------------------------
/2011.ructf-quals/cry300/7_after_spl2c.c:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/cry300/7_after_spl2c.c
--------------------------------------------------------------------------------
/2011.ructf-quals/cry300/8_ANSWER:
--------------------------------------------------------------------------------
1 | 11O2FTC
2 |
--------------------------------------------------------------------------------
/2011.ructf-quals/cry300/spl-1.2.1.tar.gz:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/cry300/spl-1.2.1.tar.gz
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/README:
--------------------------------------------------------------------------------
1 | образ прошивки для AVR который на LCD дисплей неизвестной марки выводит код
2 | дизасмится IDA'ой, находится знакогенератор (см. key.txt в конце), и вывод символов
3 | можно эмулировать через avrsimulatoridesetup151.exe
4 |
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/avrsimulatoridesetup151.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/rev200/avrsimulatoridesetup151.exe
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/bin2font.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | data = File.read('key.bin')
3 | i=1
4 | data.each_byte do |b|
5 | s = "%08b" % b
6 | puts s.tr('01','.#')
7 | if i==8
8 | #puts
9 | i=0
10 | end
11 | i+=1
12 | end
13 |
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/fc.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | # simple binary file compare (c) http://zed.0xff.me
3 | # like good old DOS "fc /b"
4 |
5 | if ARGV.size < 2
6 | puts("[!] gimme at least two filenames")
7 | exit
8 | end
9 |
10 | handles = ARGV.map{ |fname| open(fname) }
11 |
12 | while !handles.any?(&:eof)
13 | bytes = handles.map(&:readbyte)
14 | if bytes.uniq.size > 1
15 | @diff = true
16 | printf "%08x:"+" %02x"*handles.size+"\n", handles[0].pos-1, *bytes
17 | end
18 | end
19 |
20 | unless handles.all?(&:eof)
21 | @diff = true
22 | puts
23 | ARGV.each do |fname|
24 | printf "[!] %20s is %8d bytes long\n", fname, File.size(fname)
25 | end
26 | end
27 |
28 | puts "[.] all files are identical" unless @diff
29 |
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/hex2bin.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | data = File.read(ARGV.first)
3 | a = ''
4 | data.strip.split("\n").each do |l|
5 | l.strip!
6 | if l =~ /^:100/
7 | else
8 | $stderr.puts "[?] #{l}"
9 | next
10 | end
11 | l.sub! /^:100...../,''
12 | l = l[0..-3]
13 | (0..15).each do |i|
14 | a << l[i*2,2].to_i(16).chr
15 | end
16 | end
17 | $stdout << a
18 |
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/key.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/rev200/key.bin
--------------------------------------------------------------------------------
/2011.ructf-quals/rev200/mem.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/rev200/mem.bin
--------------------------------------------------------------------------------
/2011.ructf-quals/rev300/README:
--------------------------------------------------------------------------------
1 | что-то как-то считается, надо получить 89.5% (примерно, точно уже не вспомню)
2 | брутом подобралось удачно
3 |
--------------------------------------------------------------------------------
/2011.ructf-quals/rev300/brute.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | @chars = "23456789TJQKAhscd "
3 |
4 | def check c
5 | system "echo #{c}44444 | wine pe1.exe"
6 | r = $?.exitstatus
7 | printf "[.] %10s : %d %s\n", c, r, "*"*r if r>6
8 | r
9 | end
10 |
11 | def loop s0=""
12 | @chars.each_char do |c|
13 | s = s0 + c
14 | r = check s
15 | if r >= s.size
16 | print "\r#{s}: #{r}"
17 | loop s
18 | end
19 | end
20 | end
21 |
22 | loop
23 |
--------------------------------------------------------------------------------
/2011.ructf-quals/rev300/pe.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/rev300/pe.exe
--------------------------------------------------------------------------------
/2011.ructf-quals/rev300/pe1.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf-quals/rev300/pe1.exe
--------------------------------------------------------------------------------
/2011.ructf-quals/rev300/shuffle.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | @chars = "23456789TJQKAhscd "
3 |
4 | def check c
5 | system "echo #{c}44444 | wine pe1.exe"
6 | r = $?.exitstatus
7 | printf "[.] %10s : %d %s\n", c, r, "*"*r if r>6
8 | r
9 | end
10 |
11 | def loop s0=""
12 | @chars.each_char do |c|
13 | s = s0 + c
14 | r = check s
15 | if r >= s.size
16 | print "\r#{s}: #{r}"
17 | loop s
18 | end
19 | end
20 | end
21 |
22 | ac = @chars.split('')
23 | while true do
24 | s = ac.shuffle.join
25 | r = check s
26 | print "\r#{s}: #{r}" if r > 2
27 | end
28 |
--------------------------------------------------------------------------------
/2011.ructf/rev200/README:
--------------------------------------------------------------------------------
1 | key.hex is AVR AtMega64 (or 128) code
2 |
3 | 1. look at key.txt at end
4 | 2. look at key.bin in hex after substring "key:"
5 | 3. look into key.idb to calls to CreateChar function
6 |
--------------------------------------------------------------------------------
/2011.ructf/rev200/avrsimulatoridesetup151.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf/rev200/avrsimulatoridesetup151.exe
--------------------------------------------------------------------------------
/2011.ructf/rev200/bin2font.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | data = File.read('key.bin')
3 | i=1
4 | data.each_byte do |b|
5 | s = "%08b" % b
6 | puts s.tr('01','.#')
7 | if i==8
8 | #puts
9 | i=0
10 | end
11 | i+=1
12 | end
13 |
--------------------------------------------------------------------------------
/2011.ructf/rev200/fc.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | # simple binary file compare (c) http://zed.0xff.me
3 | # like good old DOS "fc /b"
4 |
5 | if ARGV.size < 2
6 | puts("[!] gimme at least two filenames")
7 | exit
8 | end
9 |
10 | handles = ARGV.map{ |fname| open(fname) }
11 |
12 | while !handles.any?(&:eof)
13 | bytes = handles.map(&:readbyte)
14 | if bytes.uniq.size > 1
15 | @diff = true
16 | printf "%08x:"+" %02x"*handles.size+"\n", handles[0].pos-1, *bytes
17 | end
18 | end
19 |
20 | unless handles.all?(&:eof)
21 | @diff = true
22 | puts
23 | ARGV.each do |fname|
24 | printf "[!] %20s is %8d bytes long\n", fname, File.size(fname)
25 | end
26 | end
27 |
28 | puts "[.] all files are identical" unless @diff
29 |
--------------------------------------------------------------------------------
/2011.ructf/rev200/hex2bin.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | data = File.read(ARGV.first)
3 | a = ''
4 | data.strip.split("\n").each do |l|
5 | l.strip!
6 | if l =~ /^:100/
7 | else
8 | $stderr.puts "[?] #{l}"
9 | next
10 | end
11 | l.sub! /^:100...../,''
12 | l = l[0..-3]
13 | (0..15).each do |i|
14 | a << l[i*2,2].to_i(16).chr
15 | end
16 | end
17 | $stdout << a
18 |
--------------------------------------------------------------------------------
/2011.ructf/rev200/key.bin:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf/rev200/key.bin
--------------------------------------------------------------------------------
/2011.ructf/rev200/key.idb:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf/rev200/key.idb
--------------------------------------------------------------------------------
/2011.ructf/rev300/README:
--------------------------------------------------------------------------------
1 | program must output 94.35%
2 | found with tbl_shuffle.rb after some launches and 1-2 hours
3 |
--------------------------------------------------------------------------------
/2011.ructf/rev300/brute.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | @chars = "23456789TJQKAhscd "
3 |
4 | def check c
5 | system "echo #{c}44444 | wine pe1.exe"
6 | r = $?.exitstatus
7 | printf "[.] %10s : %d %s\n", c, r, "*"*r if r>6
8 | r
9 | end
10 |
11 | def loop s0=""
12 | @chars.each_char do |c|
13 | s = s0 + c
14 | r = check s
15 | if r >= s.size
16 | print "\r#{s}: #{r}"
17 | loop s
18 | end
19 | end
20 | end
21 |
22 | loop
23 |
--------------------------------------------------------------------------------
/2011.ructf/rev300/pe.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf/rev300/pe.exe
--------------------------------------------------------------------------------
/2011.ructf/rev300/pe1.exe:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.ructf/rev300/pe1.exe
--------------------------------------------------------------------------------
/2011.ructf/rev300/shuffle.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/ruby
2 | @chars = "23456789TJQKAhscd "
3 |
4 | def check c
5 | system "echo #{c}44444 | wine pe1.exe"
6 | r = $?.exitstatus
7 | printf "[.] %10s : %d %s\n", c, r, "*"*r if r>6
8 | r
9 | end
10 |
11 | def loop s0=""
12 | @chars.each_char do |c|
13 | s = s0 + c
14 | r = check s
15 | if r >= s.size
16 | print "\r#{s}: #{r}"
17 | loop s
18 | end
19 | end
20 | end
21 |
22 | ac = @chars.split('')
23 | while true do
24 | s = ac.shuffle.join
25 | r = check s
26 | print "\r#{s}: #{r}" if r > 2
27 | end
28 |
--------------------------------------------------------------------------------
/2011.rwth/__info/client.conf:
--------------------------------------------------------------------------------
1 | client
2 | dev tun
3 |
4 | ca rwthctfca.pem
5 | cert team77.cert
6 | key team77.key
7 |
8 | remote 137.226.161.5 1194
9 |
10 | tls-auth ta.key 1
11 | tls-remote vpn
12 | cipher none
13 |
14 | persist-key
15 | persist-tun
16 |
17 | verb 3
18 | mute 10
19 | nobind
20 |
21 |
22 |
--------------------------------------------------------------------------------
/2011.rwth/__info/extract.rb:
--------------------------------------------------------------------------------
1 | #!/usr/bin/env ruby
2 | boundaries = `grep boundary *.uncrypt`.strip.split("\n")
3 | boundaries.each do |b|
4 | fname = b.split(':').first
5 | bound = b.split('"')[-1]
6 | # p [fname,bound]
7 | File.binread(fname).split(bound).each do |part|
8 | if part['MIME'] && part =~ /filename="(.*)"/
9 | fname = $1
10 | p fname
11 | data= part.split("\n\n",2)[1]
12 | File.open(fname,'w'){ |f| f<< data.unpack('m*').first }
13 | else
14 | #p part
15 | end
16 | end
17 | end
18 |
--------------------------------------------------------------------------------
/2011.rwth/__info/network.png:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.rwth/__info/network.png
--------------------------------------------------------------------------------
/2011.rwth/__info/secret.txt:
--------------------------------------------------------------------------------
1 | unoopehaihaebaig
2 |
--------------------------------------------------------------------------------
/2011.rwth/__info/ta.key:
--------------------------------------------------------------------------------
1 | #
2 | # 2048 bit OpenVPN static key
3 | #
4 | -----BEGIN OpenVPN Static key V1-----
5 | 52bf822947d57fd57f71e68bdc41bd91
6 | 870d0ec6409e365bdcc32fe5946057e7
7 | 986243a280906cdb01c9f1083b2bf687
8 | 1092f027c850eb1259e9c9e68f9b4a7f
9 | accf3428edfb83ad8d3cd7b14ce04844
10 | 1c72a07dc9d16b0aa6ff9764a91ee1fb
11 | 01ae3dec12b31054a2093264e490005f
12 | bb7a63d319575541e281eb689842d058
13 | 60da9d5b99f55efbddb30463d242a1a6
14 | 5b62d749100bf6af1ff1620e72f1f2fc
15 | f98ca977942dbf80ae2f559b87b00204
16 | c513e9c4d45f140442ecf59d613941bf
17 | e02ef24db77883a10dcdf4e1240c782c
18 | 094be6a1e0cb7cf9d7bb9d7a1fa433f6
19 | b2384900614eb745717a7d185316ba39
20 | 6a2e10c180f9d1aefff56af57305b3f7
21 | -----END OpenVPN Static key V1-----
22 |
--------------------------------------------------------------------------------
/2011.rwth/forum/README:
--------------------------------------------------------------------------------
1 | do not change/comment out parts of the service functions. functions like file
2 | uploads, account creation and message exchange are used to deposit flags on
3 | the system.
4 |
--------------------------------------------------------------------------------
/2011.rwth/forum/admin/addcats.php:
--------------------------------------------------------------------------------
1 | array('text','','*'),
13 | 'gids' => array('text','','*'),
14 | 'add' => array('submit','add category')
15 | ));
16 | }
17 |
18 | require_once('includes/footer.inc.php');
19 | ?>
20 |
--------------------------------------------------------------------------------
/2011.rwth/forum/admin/addgroups.php:
--------------------------------------------------------------------------------
1 | array('text','','*'),
9 | 'add' => array('submit','add group')
10 | ));
11 |
12 | require_once('includes/footer.inc.php');
13 |
14 | ?>
15 |
--------------------------------------------------------------------------------
/2011.rwth/forum/admin/adminsql.php:
--------------------------------------------------------------------------------
1 | array('text','','*'),
11 | 'execute' => array('submit','execute')
12 | ));
13 |
14 | require_once('includes/footer.inc.php');
15 |
16 | ?>
17 |
--------------------------------------------------------------------------------
/2011.rwth/forum/admin/isadmin.php:
--------------------------------------------------------------------------------
1 |
25 |
--------------------------------------------------------------------------------
/2011.rwth/forum/admin/manage.php:
--------------------------------------------------------------------------------
1 | array('select','SELECT * FROM '.sqlite_escape_string($_POST['edit']).';'),
10 | 'table' => array('hidden', $_POST['table']),
11 | 'change' => array('submit','manage selected')
12 | ));
13 | } else {
14 | form_dump(array(
15 | 'edit' => array('select','SELECT name FROM sqlite_master WHERE type="table";'),
16 | 'change' => array('submit','manage selected')
17 | ));
18 | }
19 |
20 | require_once('includes/footer.inc.php');
21 |
22 | ?>
23 |
--------------------------------------------------------------------------------
/2011.rwth/forum/dbs/psn.sqlite:
--------------------------------------------------------------------------------
https://raw.githubusercontent.com/zed-0xff/ctf/45f027427b65c9b3b2be1e2a05b2cf86f6f9c446/2011.rwth/forum/dbs/psn.sqlite
--------------------------------------------------------------------------------
/2011.rwth/forum/fileoverview.php:
--------------------------------------------------------------------------------
1 | ';
10 | foreach ($keys as $k) {
11 | echo "\t".''.$k.' '."\n";
12 | }
13 | echo ' '."\n";
14 | foreach ($res as $r) {
15 | echo ''."\n";
16 | foreach ($r as $k=>$rt) {
17 | echo "\t".'';
18 | if ($k == 'file') {
19 | echo '';
20 | }
21 | echo $rt;
22 | if ($k == 'file') {
23 | echo '';
24 | }
25 | echo ' '."\n";
26 | }
27 | echo ' '."\n";
28 | }
29 | echo '';
30 | echo '
'."\n";
31 |
32 | echo 'Back' ;
33 | require_once('includes/footer.inc.php');
34 | ?>
35 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/admin.inc.php:
--------------------------------------------------------------------------------
1 | 0) {
6 | $pname = substr($turl, 0, $num);
7 | } else {
8 | $pname = $turl;
9 | }
10 | var_dump($pname);
11 |
12 | $res = @db_fetch_array(@db_query("SELECT name FROM admin WHERE name='".$pname."'"), SQLITE_NUM);
13 | if (count($res) > 0) {
14 | foreach ($res['0'] as $r) {
15 | echo implode(';', $r)."
\n";
16 | }
17 | }
18 | ?>
19 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/cats.inc.php:
--------------------------------------------------------------------------------
1 |
43 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/fileups.inc.php:
--------------------------------------------------------------------------------
1 |
5 |
6 |
7 |
11 |
12 |
13 |
42 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/footer.inc.php:
--------------------------------------------------------------------------------
1 |
6 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/navi.inc.php:
--------------------------------------------------------------------------------
1 |
30 |
31 |
32 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/posts.inc.php:
--------------------------------------------------------------------------------
1 |
15 |
--------------------------------------------------------------------------------
/2011.rwth/forum/includes/vars.inc.php:
--------------------------------------------------------------------------------
1 |
15 |
--------------------------------------------------------------------------------
/2011.rwth/forum/index.php:
--------------------------------------------------------------------------------
1 |
4 |
5 |
6 | Welcome to the forum of the Prank Scammers Nigeria (PSN)!
7 |
8 |
9 | Feel free to use out tricks, to buy/sell CCs and post exploits. We are really happy to widen our influence and get more profit on the back of the stupid bastards not caring about security or not knowing how to secure their systems.
10 |
11 |
12 | w3 4r3 th3 l33t h4x0rs, l34rn fr0m u5!!!
13 |
14 |
15 |
18 |
--------------------------------------------------------------------------------
/2011.rwth/forum/init.php:
--------------------------------------------------------------------------------
1 |
7 |
--------------------------------------------------------------------------------
/2011.rwth/forum/logout.php:
--------------------------------------------------------------------------------
1 |
20 |
--------------------------------------------------------------------------------
/2011.rwth/forum/new_post.php:
--------------------------------------------------------------------------------
1 | array('text',"$user"),
9 | 'title'=>array('text','','*'),
10 | 'message'=>array('textarea',''),
11 | 'submit'=>array('submit', 'Save post')
12 | ));
13 | } else {
14 |
15 | }
16 |
17 | require_once('includes/footer.inc.php');
18 | ?>
19 |
--------------------------------------------------------------------------------
/2011.rwth/forum/news.php:
--------------------------------------------------------------------------------
1 | '."\n";
31 | echo 'time: news: ';
34 | echo @date("d.m.Y H:i", $d['ts']);
35 | echo ' ';
36 | echo $d['content'];
37 | echo '
\n";
5 | ?>
6 |
7 |
8 | - private messages
9 | - show my send messages
10 | - show my files
11 |
12 |
13 |
16 |
--------------------------------------------------------------------------------
/2011.rwth/forum/tpls/templatef.inc.php:
--------------------------------------------------------------------------------
1 |
2 |
3 |
4 |
5 |