Posted: 6 Feb 2022 by Codehead
6 minute read
It’s been a while since I did any CTFs. I figured it would be fun to revisit the scene and see if I could learn something new.
Here’s a Web challenge from DiceCTF 2022. I really need to brush up and my web skills and I’ve never even looked at NodeJS before.
Challenge
web/knock-knock
BrownieInMotion
107 points
Knock knock? Who’s there? Another pastebin!!
https://knock-knock.mc.ax
Posted: 6 Feb 2022 by Codehead
6 minute read
Intro
Following on from breaking Wordle in my earlier post, I decided to use the data extracted from the app to try and work out the best starting words for the game.
I’ve seen a few articles about people’s chosen starter which is often based on vowel-heavy words. However, I have all the solutions and the valid words, so I can run some analysis and select a statistically accurate answer rather than guessing a word.
There is a lot of analysis, charts and statistical calculation below. The idea is to walk through the process so you understand why the words were selected. However, if you just want the results, scroll to the bottom of the page.
The solution list contains 2315 words. This means that Wordle has enough daily answers to run until Oct 21, 2027. The recent news that the game has been bought by the New York Times had people rushing to save a local copy of the game to play for free ‘forever’. Looks like we only have 5 years worth of games unless the answer list is extended.
The valid word list is much bigger at 10657 words. Some of the entries are pretty bizarre, so it wouldn’t be a good idea to use those as an extended solution list. However, if this was the answer list, the game could run until Aug 23, 2050. Only really an option if you’re happy with answers like: “aiyee”, “akkas”, “buhls”, “dzhos” and “thagi”.
Posted: 28 Jan 2022 by Codehead
3 minute read
Intro
The year is 2022 and EVERYONE is playing Wordle.
Wordle is a fun little word game that anyone can pick up and play. Six guesses to find a five letter word. It is surprisingly addictive.
However, after solving the daily puzzle I found I had to wait 24 hours for the next one. Like any self respecting hacker I wasn’t having that so I smashed F12 to have a dig around in the guts of the game.
Posted: 28 Jan 2018 by Codehead
2 minute read
Problem
Description: this chall sucks, you should watch VIE vs UZB match. :)
VIET NAM VO DICH!
Author: kad96
Website: Link
Visiting the website gave me a blank page. There had to be something more hidden here.
Posted: 23 Jan 2018 by Codehead
2 minute read
Challenge
Aalekh joined IIIT in 2014. Soon, he started selling T-shirts and hoodies. One day, Aalekh got a big order and trusted his childhood friend to handle the order. But his friend betrayed him and sold bad pieces. College students got angry and tried to beat Aalekh up. His good friend, Anshul, wanted to save him. To prevent Aalekh from going under loss, he has to sell 500 T-shirts on the market, the only condition being, customers have to be unique.
Can you help Anshul sell 500 T-shirts?
https://felicity.iiit.ac.in/contest/breakin/questions/uuid/
Flag Format: BREAKIN{[0-9A-Za-z_]+}
Posted: 15 May 2016 by Codehead
4 minute read
This was a nice SQL injection challenge from TU CTF.
Challenge
We are trying to find out what our grade was, but we don’t seem to be in the database…
Can you help us out?
http://104.199.151.39/index.html
Posted: 18 Apr 2016 by Codehead
2 minute read
This was a nice little web challenge from sCTF. I’m trying to do more web challenges as it’s one of my weaker areas.
Challenge:
The ducks and I have a unfinished score to settle.
http://ducks.sctf.michaelz.xyz/
Hint:
If you’ve remember HSF, you’ll know that The Ducks is unsolvable.