FireFly FireyFly

Taxes

Active participants of DiceCTF 2022 are required to complete form DG1 "Flag Validation." Failure to do so may result in disqualification.

An official message of the DiceGang Revenue Service

In this challenge we're given a pool of forms as PDFs and asked to fill in one of them (DG1).

Endpoints

GET www.ombord.info/api/jsonp/position/
GET www.ombord.info/api/jsonp/user/
GET www.ombord.info/api/jsonp/users/
GET www.ombord.info/api/jsonp/connectivity/

(Thalys) GET thalysnet.com/connectivity_proxy.php

Responses

Included are API responses for queries to the different endpoints, on Thalys and SJ trains.

FUSE archive format

CSV

For some files, there is a CSV file accompanying the FUSE archive. The CSV contains fields for filename, offset in FUSE file, decompressed file size and (I think) checksum.

Header

struct fuse_header {

char magic[8]; // FUSE1.00

Keybase proof

I hereby claim:

I am FireyFly on github.
I am firefly (https://keybase.io/firefly) on keybase.
I have a public key whose fingerprint is 1FB1 834E EDE9 D1AA 38F3 9BEA 45FF FB70 B372 5D5C

To claim this, I am signing this object:

	/** Schema sidebar **/
	/* General text colour */
	.cIypmL {
	/*
	color: rgb(20, 24, 35);
	*/
	color: rgb(235, 231, 220);
	}

	/* Outer container */

	// @flow

	// adapted from flown
	type Is<A, B> = $Call<
	& (<A, B: A>(...args: [A, B]) => $Call<((B) => true) & (() => false), A>)
	& (() => false)
	, A, B>;


	// Peano arithmetic

	# Stuff for finding out which docker containers are autostarting, and making them not do so

	# https://stackoverflow.com/a/45022623/1267058

	# Find containers whose RestartPolicy is 'always'--these are the culprits
	docker ps -a --format '{{.ID}} {{.Names}}' \
	\| while read id name; do
	policy=$(docker inspect $id \| jq -r '.[].HostConfig.RestartPolicy.Name')
	printf '%s %-30s %s\n' "$id" "$name" "$policy"
	done \

	" FireFly's FactoryIdle vim syntax file.

	" Check that a syntax file hasn't been loaded already.
	if exists("b:current_syntax")
	finish
	endif

	"" Syntax """""""""""""""""""
	syn match facDesignLine "^\s.*" contains=@facDesign,facDesignComment
	syn match facDesignComment "\[.*\]" contained

	struct hock_header {
	uint32_t magic; /* 0x6b636f48 = 'Hock' */
	uint8_t command;
	} __attribute__((packed));

	struct hock_01 { /* server status request/response */
	uint8_t version;
	uint32_t timestamp;
	uint8_t players;
	uint8_t gamemode;

	File tree Omitted files Type
	.
	├── ThumbBg.dat DSARCIDX
	│ └···Thubg*.imy ( 19 files) IMY
	├── bg.dat DSARCIDX
	│ └···bg*.mpb (117 files) MAP/IMY
	├── bgm.dat DSARCFL
	│ └···bgm_*.msnd ( 33 files) DSEQ
	├── bgm.dat.tbl DATTBL
	├── bu.dat DSARCIDX