[kankerman]

anyone got the ones for crypto? this the only challenges im really struggling with, i have all other challenges

[Computerlab]

[PWN] el pipo

a type of buffer overflow challenge

Hidden Content

You must register or login to view this content.

[yoyopwn]

Use this script for crypto Binary Basis

from Crypto.Util.number import long_to_bytes, inverse from math import prod prime_list = [177433995632585646643938770425036805593,201248411415496041161608451182478476651,211565639988646066084516543793152198691,219876124958933231098612850322526589449,231064506115305357425020635842612539447,234412327930918375982208973121051256703,237698251138254651570085824926169468373,257625975719126301912858129201276787967,271852097809552507680385772555572662251,275659373105708586943140025923053203649,287388491685355701504000759461314948007,299880188984019031026827249219116473077,301666687585301891299278182740559644813,307618172470874661743505812942878894883,324591622192086196189873735246561229599,328590850013220519307624591674287922827] n = prod(prime_list) e = 0x10001 c = 258206881010783673911167466000280032795683256029763436680006622591510588918759130811946207631182438160709738478509009433281405324151571687747659548241818716696653056289850196958534459294164815332592660911913191207071388553888518272867349215700683577256834382234245920425864363336747159543998275474563924447347966831125304800467864963035047640304142347346869249672601692570499205877959815675295744402001770941573132409180803840430795486050521073880320327660906807950574784085077258320130967850657530500427937063971092564603795987017558962071435702640860939625245936551953348307195766440430944812377541224555649965224  # Step 1: Calculate phi(n) phi_n = prod([p - 1 for p in prime_list]) # Step 2: Calculate d, the modular inverse of e mod phi(n) d = inverse(e, phi_n) # Step 3: Decrypt the message m = pow(c, d, n) decrypted_message = long_to_bytes(m) print("Decrypted Message:", decrypted_message.decode())

[Rob1nhood]

Can anyone help me on reversing linkhands

0000000000404050  00 00 00 00 00 00 00 00  7D 00 00 00 00 00 00 00  ........}.......
0000000000404060  00 00 00 00 00 00 00 00  5F 00 00 00 00 00 00 00  ........_.......
0000000000404070  80 40 40 00 00 00 00 00  63 00 00 00 00 00 00 00  .@@.....c.......
0000000000404080  90 40 40 00 00 00 00 00  68 00 00 00 00 00 00 00  .@@.....h.......
0000000000404090  A0 40 40 00 00 00 00 00  34 00 00 00 00 00 00 00  .@@.....4.......
00000000004040A0  B0 40 40 00 00 00 00 00  31 00 00 00 00 00 00 00  .@@.....1.......
00000000004040B0  C0 40 40 00 00 00 00 00  6E 00 00 00 00 00 00 00  ..@.....n.......
00000000004040C0  D0 40 40 00 00 00 00 00  5F 00 00 00 00 00 00 00  ..@....._.......
00000000004040D0  E0 40 40 00 00 00 00 00  30 00 00 00 00 00 00 00  ........0.......
00000000004040E0  F0 40 40 00 00 00 00 00  65 00 00 00 00 00 00 00  ........e.......
00000000004040F0  00 41 40 00 00 00 00 00  33 00 00 00 00 00 00 00  .A@.....3.......
0000000000404100  10 41 40 00 00 00 00 00  34 00 00 00 00 00 00 00  .A@.....4.......
0000000000404110  20 41 40 00 00 00 00 00  33 00 00 00 00 00 00 00  A@.....3.......
0000000000404120  30 41 40 00 00 00 00 00  66 00 00 00 00 00 00 00  0A@.....f.......
0000000000404130  40 41 40 00 00 00 00 00  35 00 00 00 00 00 00 00  @A@.....5.......
0000000000404140  50 41 40 00 00 00 00 00  33 00 00 00 00 00 00 00  PA@.....3.......
0000000000404150  60 41 40 00 00 00 00 00  37 00 00 00 00 00 00 00  `A@.....7.......
0000000000404160  70 41 40 00 00 00 00 00  65 00 00 00 00 00 00 00  pA@.....e.......
0000000000404170  80 41 40 00 00 00 00 00  62 00 00 00 00 00 00 00  .A@.....b.......
0000000000404180  50 40 40 00 00 00 00 00  63 00 00 00 00 00 00 00  P@@.....c.......
0000000000404190  A0 41 40 00 00 00 00 00  48 00 00 00 00 00 00 00  .A@.....H.......
00000000004041A0  B0 41 40 00 00 00 00 00  54 00 00 00 00 00 00 00  .A@.....T.......
00000000004041B0  C0 41 40 00 00 00 00 00  42 00 00 00 00 00 00 00  ..@.....B.......
00000000004041C0  D0 41 40 00 00 00 00 00  7B 00 00 00 00 00 00 00  ..@.....{.......
00000000004041D0  E0 41 40 00 00 00 00 00  34 00 00 00 00 00 00 00  ........4.......
00000000004041E0  F0 41 40 00 00 00 00 00  5F 00 00 00 00 00 00 00  ........_.......
00000000004041F0  00 42 40 00 00 00 00 00  62 00 00 00 00 00 00 00  .B@.....b.......
0000000000404200  10 42 40 00 00 00 00 00  72 00 00 00 00 00 00 00  .B@.....r.......
0000000000404210  20 42 40 00 00 00 00 00  33 00 00 00 00 00 00 00  B@.....3.......
0000000000404220  30 42 40 00 00 00 00 00  34 00 00 00 00 00 00 00  0B@.....4.......
0000000000404230  40 42 40 00 00 00 00 00  6B 00 00 00 00 00 00 00  @B@.....k.......
0000000000404240  50 42 40 00 00 00 00 00  5F 00 00 00 00 00 00 00  PB@....._.......
0000000000404250  60 42 40 00 00 00 00 00  31 00 00 00 00 00 00 00  `B@.....1.......
0000000000404260  70 42 40 00 00 00 00 00  6E 00 00 00 00 00 00 00  pB@.....n.......
0000000000404270  80 42 40 00 00 00 00 00  5F 00 00 00 00 00 00 00  .B@....._.......
0000000000404280  90 42 40 00 00 00 00 00  74 00 00 00 00 00 00 00  .B@.....t.......
0000000000404290  A0 42 40 00 00 00 00 00  68 00 00 00 00 00 00 00  .B@.....h.......
00000000004042A0  60 40 40 00 00 00 00 00  33 00 00 00 00 00 00 00  `@@.....3.......
00000000004042B0  ?? ?? ?? ?? ?? ?? ?? ??  ?? ?? ?? ?? ?? ?? ?? ??  ????????????????
00000000004042C0  ?? ?? ?? ?? ?? ?? ?? ??  ?? ?? ?? ?? ?? ?? ?? ??  ????????????????

HTB{4_br34k_1n_th3_

then go back to address
0000000000404060 piece together the rest yourself.

Really appreciate this one thank you! I couldnt figure out where i was going wrong in Ghidra.

np, ghidra usually has a harder time de-compiling data struct, it would be useful to cross reference with IDA to get sanity checks.

---

Feel free to ask any questions. I'm done with all challenges, free to drop a couple of hints here n there.

Thank you for the advice! Ghidra has been an adjustment lol to say the least.
I miss x64debug (over ida) . but im hardly on windows anymore unless i have to be lol.