hhc0null

CC = gcc
CFLAGS =-c -std=gnu11 -fstack-protector-all -fPIC
LDFLAGS = -Wl,-z,now -Wl,-z,relro #-pie

sources = tinypad.c pwnio.c
objects = $(sources:.c=.o)
solution= tinypad

.PHONY: clean
all: $(sources) $(solution)

hhc0null

hhc0null

#!/bin/sh

CAPACITY_PATH="/sys/class/power_supply/BAT1/capacity"
capacity=$(cat ${CAPACITY_PATH})

ESC="\e"
BK=40
LBK=100
FW=30
LFW=90

hhc0null

#!/usr/bin/env python2

import binascii
import hashlib
import re
import random
import socket
import string
import struct
import subprocess

hhc0null

#!/usr/bin/env python2

import binascii
import hashlib
import itertools
import random
import re
import socket
import string
import struct

hhc0null

#!/usr/bin/env python2

import binascii
import hashlib
import re
import socket
import string
import struct
import subprocess
import time

hhc0null

I was cooking and eating curry...

hhc0null

?

hhc0null

A writeup(?) for 0CTF 2016 Quals

trace (rev 4pts)

First, I sorted the log file by a snippet shown below to analyze its behaviour.
After that I noticed that it showed a process of quick-sorting some characters('a'-'z'|'A'-'Z'|'0'-'9'|flag).

#!/usr/bin/env python2

import collections

hhc0null

(12:23) hhc0null@arch_on_vbox% ltrace -s 512 -e "[email protected].*" ./freenote                                                               [~/ctf] [8296]
freenote->malloc(6160)                                                                                               = 0x17d0010
== 0ops Free Note ==
1. List Note
2. New Note
3. Edit Note
4. Delete Note
5. Exit
====================
Your choice: freenote->read(02