Ricerca CTF 2023 - Backup Sheet

This is an emergency handout that is distributed to players in case the score server is down.

Welcome

welcome

Tags: welcome warmup
Description:

Welcome to Ricerca CTF 2023! To find the flag for this challenge:

1. Read the rule.
2. Find the flag in #announcement channel in Discord.

Web

Cat Café

Files: cat-cafe.zip
Server:

• main: http://cat-cafe.2023.ricercactf.com:8000/
• backup: http://backup-web.2023.ricercactf.com:8000/

Tags: web warmup author:ptr-yudai
Description:

Which cat do you like the most?

tinyDB

Files: tinydb.zip
Server:

• main: http://tinydb.2023.ricercactf.com:8888/
• backup: http://backup-web.2023.ricercactf.com:8888/

Tags: web author:xryuseix
Description:

It’s a tiny tiny user database…

funnylfi

Files: funnylfi.zip
Server:

• main: http://funnylfi.2023.ricercactf.com:31415/
• backup: http://backup-web.2023.ricercactf.com:31415/

Tags: web author:satoki
Description:

A super-secure website viewer on a website.

ps converter

Files: ps-converter.zip
Server:

• main: http://ps-converter.2023.ricercactf.com:51514/
• backup: http://backup-web.2023.ricercactf.com:51514/

Tags: web author:hugeh0ge
Description:

Try my Postscript converter!

Crypto

Revolving Letters

Files: revolving-letters.zip
Tags: crypto warmup author:keymoon
Description:

Who keeps spinning letters around?

Rotated Secret Analysis

Files: rotated-secret-analysis.zip
Tags: crypto author:keymoon
Description:

A wise person once said that rotating the secret makes it safer!
Huh? Isn’t that what they meant?

RSALCG

Files: rsalcg.zip
Tags: crypto author:ptr-yudai
Description:

LCG is weak, but what if it’s used with RSA?

dice-vs-kymn

Files: dice-vs-kymn.zip
Server:

• main: nc dice-vs-kymn.2023.ricercactf.com 5963
• backup: nc backup-other.2023.ricercactf.com 5963

Tags: crypto author:ptr-yudai author:keymoon
Description:

[HELP WANTED] King Dice

Pwn

BOFSec

Files: bofsec.zip
Server:

• main: nc bofsec.2023.ricercactf.com 9001
• backup: nc backup-pwn.2023.ricercactf.com 9001

Tags: pwn warmup author:ptr-yudai
Description:

100% authentic

NEMU

Files: nemu.zip
Server:

• main: nc nemu.2023.ricercactf.com 9002
• backup: nc backup-pwn.2023.ricercactf.com 9002

Tags: pwn author:keymoon
Description:

I could only implement a few instructions.
That’s because I was sleepy.

safe thread

Files: safe-thread.zip
Server:

• main: nc safe-thread.2023.ricercactf.com 9004
• backup: nc backup-pwn.2023.ricercactf.com 9004

Tags: pwn author:ptr-yudai
Description:

Okay, BOF is useless now.

Oath to Order

Files: oath-to-order.zip
Server:

• main: nc oath-to-order.2023.ricercactf.com 9003
• backup: nc backup-pwn.2023.ricercactf.com 9003

Tags: pwn author:keymoon author:ptr-yudai
Description:

Take care of the order.

Reversing

crackme

Files: crackme.zip
Tags: reversing warmup author:ptr-yudai
Description:

Can you crack the password?

ignition

Files: ignition.zip
Tags: reversing author:Arata
Description:

3… 2… 1… ignition.
Hint: use Ghidra v9.2.2

tic tac toe?

Files: tic-tac-toe.zip
Tags: reversing author:Arata
Description:

I downloaded a game from the ancient internet, but it seems buggy…?

RSLocker

Files: rslocker.zip
Tags: reversing author:ptr-yudai
Description:

A ransomware is spreading around the world.
We successfully extracted the screen locker of the malware.
Would you help us find the unlock code?
* The program may contain some malicious codes. Do not run it unless you understand its behavior.

Forensics

My name is Power!

Files:

• Google Drive: memory.zip
• MEGA Drive: memory.zip

Tags: forensics author:pinksawtooth
Description:

Show me your Power!

Misc

gatekeeper

Files: gatekeeper.zip
Server:

• main: nc gatekeeper.2023.ricercactf.com 10005
• backup: nc backup-other.2023.ricercactf.com 10005

Tags: misc author:Arata
Description:

Bypass the base64 filter