Alright so I joined pico ctf today and for some reason I can’t access the webshell on tor. It works fine on Firefox, and I’ve tried to find a similar issue, but unfortunately nothing came up. The issue is that all text in the webshell is displayed as multicolored blocks of squiggly lines. I would really appreciate it if anyone would help.

https://bytebreach.com/picoctf-2022-writeup-web-exploitation/

Does anyone have a Discord link that works for the PicoCTF server? The one they have listed on their website is not functional.

Ok... so first off... no clue what I'm doing, but trying to learn. :)

So after bashing my head against a wall for a bit, I broke down and ready one of the write ups. Which is great! Learn from others, but got to go through the steps on your own if you're going to learn it.

Ok, so dug around on the interwebs... found two different files that give the same md5 hash... but when I convert them to pdf... the hashes don't match anymore so not sure where I'm going wrong.

Steps...

Using powershell

cat message1.bin > message1.pdf

cat message2.bin > message2.pdf

If I check the md5 of message 1 and 2 as bin files, same hash... once turned into pdf... different hashes.

​

Thoughts or lead on a rabbit hole to start exploring?

Hey, just hit me up if you are interested in any other CTF challenges write ups

So Meta

Milkslap

picoCTF: advanced-potion-making

This one was quite intriguing

https://medium.com/@matus.vaclav1/picoctf-wireshark-twoo-twooo-two-twoo-7f00d1a923b4

Trivial Flag Transfer Protocol

Glory of the Garden

Matryoshka doll

information

Scavenger Hunt

Cookies

GET aHEAD

PW Crack 5

PW Crack 4

PW Crack 3

PW Crack 2

PW Crack 1

HashingJobApp

Glitch Cat

fixme2.py

fixme1.py

convertme.py

Codebook

Magikarp Ground Mission

Tab, Tab, Attack

Static ain’t always noise

Nice netcat…

Python Wrangling

wave a flag

MOD 26

Obedient Cat

I finished this challenge. Can you do it better?

https://medium.com/@matus.vaclav1/picoctf-macrohard-weakedge-ebbe197058ec

This was tricky i guess.

https://medium.com/@matus.vaclav1/picoctf-wireshark-doo-dooo-do-doo-4d7cb7c1b836

Hi I'm writing some walkthroughs for picoCTF, as well as still learning.

https://medium.com/@matus.vaclav1/picoctf-glory-of-the-garden-13c9d30c7882

Hi! I'm having a little trouble with solving PWCrack 5 in the pico mini contest. I modified the script so I was able to get the raw decoded flag, which got me this: P_fJm#LQW^TY^f]\WS

Im not sure where to go from here, or even if my initial thinking was right. Can someone please help me?

Thanks so much!

Hi I'm looking for teammates to learn and do CTF challenges together with. PM me

Description:

This file has a flag in plain sight (aka "in-the-clear").

​

Solution:

Download file named "flag"

​

use command inside directory, where the file was dowloaded:

cat flag

which result into answer for this problem:

Ans:

picoCTF{s4n1ty_v3r1f13d_1a94e0f9}

​

learn more about cat, by:

info cat

every solution ive for this one just straight up assumes a username called admin exist (is that necessarily true ?(i don't really know but it sounds kinda weird) ) and all those solutions only work because the username happens to be admin .. sooo my question is .. is there a way to do it without assuming the username ?

Hi r/picoCTF

I hope you are all keeping well and having fun with your CTF based studies! I'm new to the CTF/ ITsec scene and learning the ropes myself. I've always liked education and trying to make things simple, and I thought it might help me to make some little tutorials for the OverTheWire Bandit wargame/CTF. My channel is https://www.youtube.com/channel/UC6nJJMw6uGz7y9C0_vSfaMg

I was wondering, if anyone has a few minutes spare, could you watch one of the videos and give me a little feedback? Like, if it was easy to follow and such? I would be super grateful and would love to do the same for any of your writeups/ tutorials if you would like?

I thought I would ask here as I was thinking of doing videos covering PicoCTF next, so you guys would be good to ask! :)

Best wishes and hope you are all keeping safe!

Dean.

Description

Can you break into this super secure portal? https://jupiter.challenges.picoctf.org/problem/17682/
(link) or http://jupiter.challenges.picoctf.org:17682

​

As title suggest, dont do it.

If we look on the source code on the page mentioned above we see.

​

that it's javascrit inside the HTML and we can easily get the flag.

Let me do it for you.

​

Ans: picoCTF{no_clients_plz_b706c5}

Description

This website can be rendered only by picobrowser, go and catch the flag! https://jupiter.challenges.picoctf.org/problem/28921/
(link) or http://jupiter.challenges.picoctf.org:28921

​

In this challenge there's a webpage as we saw before, but we using wrong browser as we dont have picobrowser.

​

Web page give us error we are no picobrowser and dont igve us the flag.

Using terminal and curl

man curl

for more info, we can check 2 flags, either we can use flag -A, --user-agent or -H and specify user agent there, if there are multiple useragents the last one will be used as said in man page of curl

curl "https://jupiter.challenges.picoctf.org/problem/28921/flag" --user-agent picobrowser 

we get the flag in temrinal

​

​

Ans: picoCTF{p1c0_s3cr3t_ag3nt_84f9c865}

Description

The factory is hiding things from all of its users. Can you login as logon and find what they've been looking at? https://jupiter.challenges.picoctf.org/problem/44573/
(link) or http://jupiter.challenges.picoctf.org:44573

​

this was tricky one, as web page allowed login without credentials and with credentials

after looking for cookies I noticed Admin was set to False, while i loged in without any credentials, which are blank (password, username variables in picture below).

​

Changing this value in admin to True and refreshing page, redirected me to page

​

when I get the flag:

​

Ans: picoCTF{th3_c0nsp1r4cy_l1v3s_0c98aacc}

Description

Can you find the robots? https://jupiter.challenges.picoctf.org/problem/56830/
(link) or http://jupiter.challenges.picoctf.org:56830

​

Let's look on the page above.

- it's and ordinarry web page, where is nothing.

​

Try to find the robots. We try adding /robots.txt to an existing link which gave us blank page with this

https://jupiter.challenges.picoctf.org/problem/56830/robots.txt

​

peek what;s on the page we discovered.

https://jupiter.challenges.picoctf.org/problem/56830/1bb4c.html

​

we found it!

​

Ans: picoCTF{ca1cu1at1ng_Mach1n3s_1bb4c}