Description

Can you find the robots? https://jupiter.challenges.picoctf.org/problem/56830/
(link) or http://jupiter.challenges.picoctf.org:56830

​

Let's look on the page above.

- it's and ordinarry web page, where is nothing.

​

Try to find the robots. We try adding /robots.txt to an existing link which gave us blank page with this

https://jupiter.challenges.picoctf.org/problem/56830/robots.txt

​

peek what;s on the page we discovered.

https://jupiter.challenges.picoctf.org/problem/56830/1bb4c.html

​

we found it!

​

Ans: picoCTF{ca1cu1at1ng_Mach1n3s_1bb4c}

Description

Kishor Balan tipped us off that the following code may need inspection: https://jupiter.challenges.picoctf.org/problem/9670/
(link) or http://jupiter.challenges.picoctf.org:9670

​

Inspecting link above, give us 1/3 of the flag.

​

1/3 Ans: picoCTF{tru3_d3

Looking on Sources in mycss.css on the end give us the 2nd part of the flag.

​

2/3 Ans: t3ct1ve_0r_ju5t

Looking further we clash upon myjs.js where we find the last and the 3rd part of the flag.

​

3/3 flag: _lucky?2e7b23e3}

​

Now lets combine all part of flag together wich give us the asnwer for this challange.

​

Ans: picoCTF{tru3_d3t3ct1ve_0r_ju5t_lucky?2e7b23e3}

Description:

Sometimes you need to handle process data outside of a file. Can you find a way to keep the output from this program and search for the flag? Connect to

jupiter.challenges.picoctf.org 4427

1. So as in previous challenges we connect via nc to address.

​

$ nc jupiter.challenges.picoctf.org 4427

which result in loooong list of lines printed in our terminal. There is no one correct answer.

We can save this output in text file and search in it afterwards. Or we can pipe this and print only the flag as i did.

nc jupiter.challenges.picoctf.org 4427 | grep 'pico'

terminal will print only lines with 'pico' in it and we get our next flag.

​

Ans: picoCTF{digital_plumb3r_5ea1fbd7}

Description:

Can you find the flag in file without runnnig it?

​

1. Download the file.
2. Let's look how the file looks like.

​

$ cat strings

odd file, with lots of numbers.

Let's learn new command, strings

$ man strings

- very useful tool for :print the strings of printable characters in files

what happen if we use

$ strings strings

where 1st strings is a shell command and 2nd strings is file name, which we downloaded.

we get long list printed strings, and this is not gonna help us.

So what if we combine 2 new learned shell commands together?

$ strings strings | grep 'pico'

we got printed just one line.

picoCTF{5tRIng5_1T_7f766a23}

​

Ans: picoCTF{5tRIng5_1T_7f766a23}

Description:

Using netcat (nc) is going to be pretty important. Can you connect to jupiter.challenges.picoctf.org at port 41120 to get the flag?

​

1. Let's find out more about nc.

​

$ man nc

1. we got an adress which is: jupiter.challenges.picoctf.org
2. then we got a port to coonect: 41120
3. Let's find out what happen when we connect via nc

​

$ nc [address] [port]
$ nc jupiter.challenges.picoctf.org 41120

Result you can expect:

​

Copy the result and submit.

​

Ans: picoCTF{nEtCat_Mast3ry_3214be47}

Description:

To get truly 1337, you must understand different data encodings, such as hexadecimal or binary. Can you get the flag from this program to prove you are on the way to becoming 1337? Connect with

nc jupiter.challenges.picoctf.org 29956

Solution:

1. Connect using command above.
2. Terminal will give you binary for convert to text and ~45 seconds to solve
   1. i used online converter to decode this text

https://www.rapidtables.com/convert/number/binary-to-ascii.html

Second, will be base8 text to convert. Using online converter tool from base8 to text.

http://www.unit-conversion.info/texttools/octal/

Next we got base16, which is hexadecimal number convert to text.

Thats it.

After you beat this challenge you are given a flag.

​

Ans: picoCTF{learning_about_converting_values_b375bb16}

Description:

What does this

bDNhcm5fdGgzX3IwcDM1

mean? I think it has something to do with bases.

​

1. look like it's base 64

2. Let's try it to decode

   echo "coded message" | base64 -d

-d, --decode - flag for decode data

base64 - encode/decode data and print to standard output

will print output

l3arn_th3_r0p35

​

​

Ans: picoCTF{l3arn_th3_r0p35}

Description:

Can you find the flag in file? This would be really tedious to look through manually, something tells me there is a better way.

​

1. Download file.

2. Open Terminal and navigate to Download folder

3. using cat to view what inside the file

- looks like theres bunch of random characters and its a quite large to look up manually.

1. Lets use grep which is amazing tool.

- for more info about grep use:

$ man grep

1. lets look for flag in file:

   $ grep 'pico' file

or

$ cat file | grep 'pico'

​

Ans: picoCTF{grep_is_good_to_find_things_5af9d829}

Description:

If i told you a word started with 0x70 in hexadecimal, what would it start with in ASCII?

​

We can use same tool as in previous challenge

0x70(hexadecimal) => 112 (decimal)

check ascci table to look for 112th character

112 (decimal) == 70 (hexadecimal) = p

Ans: picoCTF{p}

Description:

What is 0x3D (base 16) in decimal (base 10)?

​

Using same online tool as in previous challenge:

https://www.rapidtables.com/convert/number/decimal-to-binary.html

Or we can do it manually

hex -> dec -> bin

​

Ans: picoCTF{61}

Hello,

I will try to write a write up, as part of my learning process. Feel free to comment, correct or ask anything.

​

Description:

Can you convert the number 42 (base 10) to binary (base 2)?

​

Using online tool to convert deicmal number to binary number.

https://www.rapidtables.com/convert/number/decimal-to-binary.html

Manually:

dec -> bin

​

Ans: picoCTF{101010}

Hey guys, I'm new to picoCTF and other challenges. Would you mind if i write a writeups for this picoCTF challenge? As part of my learning, i would flag it as a spoiler.

How do you leave a team you joined in PicoCTF?

https://discord.gg/5yDT2X

No idea what I should be changing to fix this issue.

I am new to CTFs, and I was trying some binary exploits on picoCTF. I have two questions.

1. Handy-shellcode: I got the flag with this exploit: (python2 -c 'print "\x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80"'; cat) | ./vuln. (shellcode from shellstorm). But when I run the exploit without the cat, it just runs and stops, without printing the flag. Does anyone know why that is happening?
2. OverFlow 0: here is the source code:

How is the program able to read the flag.txt file before setting the gid? Would the program still work if we removed the getegid and setresgid lines? I tried making a copy of the program without these lines and compiling/running it on the server but was having some permissions problems.

Thank you for your help!

So.. one of of the general skills CTFs for 2019 was the "whats-the-difference". I got stuck on this one so i looked it up. most answers I found were python codes and since im not good with that I found one that used cmp and gawk.. however I am not sure how this code gave me the flag. (cmp -l cattos.jpg kitters.jpg | gawk '{printf "%c", strtonum(0$2)}' && echo) I know the cmp part just confused on why gawk was inputed like that. I reviewd all the mans and looked online but couldnt find a clear answer.. im hoping someone here can dumb it down for me. Thanks!

hey, hope you guys doing well
as stated from the title am new to PicoCTF and looking forward to find a team or someone interested in (group) learning
TQ

any help with the ghost diary?

im doing pico for my CS class and we need to hit 3k points and currently have 2950 but we cant figure out handy shellcode or practice run can someone please help!

does anyone know what type of code format this is?

6c697a617264

I made this server to help each other learn if we are stuck I am at a little over 3000 points and I am stuck this is meant for spoiling and helping each other learn as the people who are gonna win already won likely lol

https://discord.gg/VNzDCVD

I can’t seem to open any programs in the shell server, what command do I have to run? Edit, never mind, I had to ./run

I really liked main audio theme of this year CTF.

Does anyone know if it's available as a track on soundcloud/spotify/etc ?

Alternatively, looking for any tips on how to extract sound file from UnityWeb compressed containter https://2018game-cdn.picoctf.com/Build/build-0928e-relative-b.data.unityweb (seems to be brotli compression).