challenge files are on gopher web server. Use preferably lynx to connect to gopher server, but firefox works too.
- gopher service: go.ctf.site:10070
files are found on gopher site at:
put them together and decrypt them with uudecoder like:
given: Will you be able to sky down the hill and avoid the monster? Play the game and get some points!
go.ctf.site:10070
# download skifree.exe:
wget http://go.ctf.site:10070/GAMES/skifree.exe
# check what it is:
file skifree.exe
skifree.exe: MS-DOS executable, NE for MS Windows 3.x (3.0) (EXE) # output
to run skifree.exe:
- download: https://github.com/otya128/winevdm
- now skifree.exe can be run natively in windows 10
- flag is received when winning game
given: "My friend Daniel has a secret between his fingers!" and go.ctf.site:10079
# download skifree.exe
wget http://go.ctf.site:10070/GAMES/skifree.exe
# first enumerate:
nmap -A -Pn -sV -vvv go.ctf.site -p 10079
# result:
# PORT STATE SERVICE REASON VERSION
# 10079/tcp open finger syn-ack Linux fingerd
# |_finger: No one logged on.\x0D
# Service Info: OS: Linux; CPE: cpe:/o:linux:linux_kernel
# use finger-user-enum perl script to get intel on user daniel
./finger-user-enum.pl -u daniel -p 10079 -t go.ctf.site
resources:
- https://book.hacktricks.xyz/network-services-pentesting/pentesting-finger
- https://pentestmonkey.net/tools/user-enumeration/finger-user-enum
given: Communication is at the base of human progress, specially in tecnhology. We invite you to join the oldest and haxoristic network on the Internetz and read the message of the day!
go.ctf.site:16667
# first check what is running on port 16667
nmap -A -Pn -sV -vvv go.ctf.site -p 16667
# result:
# PORT STATE SERVICE REASON VERSION
# 16667/tcp open irc syn-ack
# | irc-info:
# | users: 40
# | servers: 2
# | ops: 7
# | chans: 32
# | lusers: 33
# | lservers: 1
# | server: go.ctf.site
# | version: UnrealIRCd-6.1.2.3. go.ctf.site
# | source ident: nmap
# | source host: CAF3F7A2.F600E4E1.D3E25E07.IP
# |_ error: Closing Link: ucnojxiro[212.95.31.145] (Quit: ucnojxiro)
# Service Info: Host: go.ctf.site
connect to IRC with IRC client like HexChat and type /motd to receive the message of the day and first IRC flag.
type: /rules to get server rules and rulez flag
type: /admin to get server admins and admin flag
type: /list to get list and topic of channels on server. The topic of the #private channel is the flag
also: /topic #private, /msg ChanServ info #private
tpye: /whois hds in #admin channel to get flag
writeups: