diff --git a/README.md b/README.md index 475927f..9fbf136 100644 --- a/README.md +++ b/README.md @@ -20,4 +20,5 @@ List of CTF events that i have joined before | Cyber Security Challenge Germany 2023 | 02 March, 00:00 WIB — 02 May 2023, 00:00 WIB | Soon | | CTF After Dark - Winter 2023 | 02 March, 09:00 WIB — 09 March 2023, 11:00 WIB | [Link](/CTF%20After%20Dark%20-%20Winter%202023/) | | KalmarCTF 2023 | 04 March, 00:00 WIB — 06 March 2023, 00:00 WIB | [Link](/KalmarCTF%202023/) | -| Nullcon HackIM CTF 2023 | 09 March, 18:00 WIB — 10 March 2023, 18:00 WIB | [Link](/Nullcon%20HackIM%20CTF%202023/) | \ No newline at end of file +| Nullcon HackIM CTF 2023 | 09 March, 18:00 WIB — 10 March 2023, 18:00 WIB | [Link](/Nullcon%20HackIM%20CTF%202023/) | +| Rush CTF 2023 | 11 March, 17:00 WIB — 12 March 2023, 05:00 WIB | [Link](/Rush%20CTF%202023/) | \ No newline at end of file diff --git a/Rush CTF 2023/Blog/README.md b/Rush CTF 2023/Blog/README.md new file mode 100644 index 0000000..28ce4b1 --- /dev/null +++ b/Rush CTF 2023/Blog/README.md @@ -0,0 +1,28 @@ +# Blog +> Hey what do you think about my blog? + +## About the Challenge +We have been given a plain website that contains a blog + +![preview](images/preview.png) + +## How to Solve? +If we check one of the post, the endpoint will looks like this + +![post](images/post.png) + +``` +http://challs.ctf.cafe:5555/post.php?page=post1.html +``` + +So I tried to to change the `post1.html` value to another file, for example `/etc/passwd`. + +![test](images/test.png) + +Unfortunately, we can't check the `passwd` file because we still inside the `posts` directory. We can use `../` or dot dot slash to go to `/` directory and then read the `passwd` file + +![flag](images/flag.png) + +``` +RUSH{LF1_1S_SO_3Z_F0R_M3} +``` \ No newline at end of file diff --git a/Rush CTF 2023/Blog/images/flag.png b/Rush CTF 2023/Blog/images/flag.png new file mode 100644 index 0000000..8b1c9e9 Binary files /dev/null and b/Rush CTF 2023/Blog/images/flag.png differ diff --git a/Rush CTF 2023/Blog/images/post.png b/Rush CTF 2023/Blog/images/post.png new file mode 100644 index 0000000..c9733a6 Binary files /dev/null and b/Rush CTF 2023/Blog/images/post.png differ diff --git a/Rush CTF 2023/Blog/images/preview.png b/Rush CTF 2023/Blog/images/preview.png new file mode 100644 index 0000000..4967ebd Binary files /dev/null and b/Rush CTF 2023/Blog/images/preview.png differ diff --git a/Rush CTF 2023/Blog/images/test.png b/Rush CTF 2023/Blog/images/test.png new file mode 100644 index 0000000..dbfee28 Binary files /dev/null and b/Rush CTF 2023/Blog/images/test.png differ diff --git a/Rush CTF 2023/Miss Bardot v2/README.md b/Rush CTF 2023/Miss Bardot v2/README.md new file mode 100644 index 0000000..d2e6559 --- /dev/null +++ b/Rush CTF 2023/Miss Bardot v2/README.md @@ -0,0 +1,19 @@ +# Miss Bardot v2 +> To some she was an icon, to others she was a sheperd, I need you to find the one that's already gone. + +> Flag2: You will need to go inside her to complete the flag. +> RUSH{ON_____NT__} + +## About the Challenge +After we know this chall is about `MV Brigitte Bardot` chall. We need to go inside the ship and find the flag + +## How to Solve? +I got the flag by using YouTube video about `MV Brigitte Bardot`. You can check the YouTube video [here](https://youtu.be/2dSzo1DZin4?t=707) + +![youtube](images/youtube.png) + +In top of the video, there is a string that match with the flag format + +``` +RUSH{ON50892NT29} +``` \ No newline at end of file diff --git a/Rush CTF 2023/Miss Bardot v2/images/youtube.png b/Rush CTF 2023/Miss Bardot v2/images/youtube.png new file mode 100644 index 0000000..16a3363 Binary files /dev/null and b/Rush CTF 2023/Miss Bardot v2/images/youtube.png differ diff --git a/Rush CTF 2023/Miss Bardot v3/README.md b/Rush CTF 2023/Miss Bardot v3/README.md new file mode 100644 index 0000000..56f5200 --- /dev/null +++ b/Rush CTF 2023/Miss Bardot v3/README.md @@ -0,0 +1,19 @@ +# Miss Bardot v3 +> To some she was an icon, to others she was a sheperd, I need you to find the one that's already gone. + +> Flag3: Name of the Vegan Cookbook they have. +> RUSH{ALLCAPSVEGANCOOKBOOK} + +## About the Challenge +After we know this chall is about `MV Brigitte Bardot` chall. We need to know the vegan cookbook they have + +## How to Solve? +I got the flag by using YouTube video about `MV Brigitte Bardot`. You can check the YouTube video [here](https://youtu.be/2dSzo1DZin4?t=673) + +![youtube](images/youtube.png) + +In the table, there is a vegan cookbook + +``` +RUSH{BETTYGOESVEGAN} +``` \ No newline at end of file diff --git a/Rush CTF 2023/Miss Bardot v3/images/youtube.png b/Rush CTF 2023/Miss Bardot v3/images/youtube.png new file mode 100644 index 0000000..3846ecc Binary files /dev/null and b/Rush CTF 2023/Miss Bardot v3/images/youtube.png differ diff --git a/Rush CTF 2023/Miss Bardot/README.md b/Rush CTF 2023/Miss Bardot/README.md new file mode 100644 index 0000000..9398102 --- /dev/null +++ b/Rush CTF 2023/Miss Bardot/README.md @@ -0,0 +1,23 @@ +# Miss Bardot +> To some she was an icon, to others she was a sheperd, I need you to find the one that's already gone. + +> Flag1: Who made her and what's her flag? +> RUSH{ALLCAPSBUILDERNAMEFLAG} + +## About the Challenge +We need to know what `Miss Bardot` is and then find the builder name and the flag + +## How to Solve? +I got the solution because one of the team member give me a link about `MV Brigitte Bardot` on a group chat + +![chat](images/chat.png) + +And after searching on wikipedia, I know the builder name is `Vosper Thornycroft` and the flag is `Australia`, but when I submit the flag, the flag was wrong. So i opened the ticket and I told them what i have found before they said the builder name is correct but the flag is wrong. + +I tried to doing a little search again about the flag, and I found some website said `MV Brigitte Bardot` flag is `Dominica` + +![flag](images/flag.png) + +``` +RUSH{VOSPERTHORNYCROFTDOMINICA} +``` \ No newline at end of file diff --git a/Rush CTF 2023/Miss Bardot/images/chat.png b/Rush CTF 2023/Miss Bardot/images/chat.png new file mode 100644 index 0000000..192b7b9 Binary files /dev/null and b/Rush CTF 2023/Miss Bardot/images/chat.png differ diff --git a/Rush CTF 2023/Miss Bardot/images/flag.png b/Rush CTF 2023/Miss Bardot/images/flag.png new file mode 100644 index 0000000..364d5d1 Binary files /dev/null and b/Rush CTF 2023/Miss Bardot/images/flag.png differ diff --git a/Rush CTF 2023/README.md b/Rush CTF 2023/README.md new file mode 100644 index 0000000..ea105fa --- /dev/null +++ b/Rush CTF 2023/README.md @@ -0,0 +1,11 @@ +# Rush CTF 2023 +CTF writeup for Nullcon Rush CTF 2023. I took part in this CTF competition with the TCP1P team, and got 11th place out of 100 teams + +Thanks to the TCP1P team especially @dimasma0305 and @dRe + +| Category | Challenge +| --- | --- | +| Web | [Blog](/Rush%20CTF%202023/Blog/) +| Osint | [Miss Bardot](/Rush%20CTF%202023/Miss%20Bardot/) +| Osint | [Miss Bardot v2](/Rush%20CTF%202023/Miss%20Bardot%20v2/) +| Osint | [Miss Bardot v3](/Rush%20CTF%202023/Miss%20Bardot%20v3/) \ No newline at end of file