reverse engineering from a wireshark pcap

If you decode this string, you get the flag, which reads 'hello_world'. If you decode this string to ASCII, you get a string which looks like its Base64 encoded. When I opened the file in notepad, I found a string which looks like it's ASCII encoded. If you unzip the containing archive, you find a file without extension called 'TOP SECRET' The task asks you to see if you can find a code in the file, which is obfuscated in some way. which is precisely what I did for a while ٩(^‿^)۶. The next task is called 'Test flag, please ignore'. The flag follows the format 'flag(answer)', so the answer is 'flag(CVE-2001-0144'). This involved finding the CVE which is shown in the 2003 film, 'Matrix Reloaded'.Ī bit of searching brings up the result, which is 'CVE-2001-0144'. The first task under the Trivia section was called 'The Problem is Choice'. I am providing links to the source files so that anyone can follow along. This means that there isn't a benefit to being the first to solve a task. The fewer teams that solve the task, the more points you receive for the task. The rules of the CTF are fairly straight forward no cheating, which is obvious, and points are weighted by the complexity required to complete the task. I also didn't understand until the end of the first day that the 44con challenge, which involved finding a suspicious usb key with a crypto wallet, was indeed part of the CTF. I wasn't able to complete the NCC tasks as these were made available so late in the day. The Scavenger hunt was made available at the end of the first full day. Most of the tasks were made available straight away, but the NCC tasks only appeared around 30 minutes before the end of the competition. The CTF consisted of eight parts: Trivia, Networking, Forensics, Crypto, Reverse-engineering, 44con (you have to be at the conference to complete this challenge), NCC (some tasks set by NCC group) and a scavenger hunt. You may be tempted to apply real-world experience to these challenges, but they are often best solved by 'thinking outside of the box'. I had been warned before starting, that these challenges are nothing like the real world. If you are not familiar with the format, a CTF or Capture the Flag, is a series of technical challenges. I decided to give the 44Con CTF a try, because, well Steve sold it to me in the opening ceremony ¯_(ツ)_/¯. I'm still a n00b to offensive security and to date had not participated in a CTF.

This was my first time in attendance, both as a speaker and a CTF participant. This year it took place from 12-14th September.

44CON takes place annually in London, UK.

Reverse engineering from a wireshark pcap