Challenge text:
Nightmare-50 50 ---
Automated home work scoring my ass. https://shades-of-nightmare.openctf.com/nzpoixyucvkjwnerntasdfascdvasdfqwerqwe/nightmare-50/
This website hosts a 'homework grading' application as an Xterm.js/Gotty webapp:
Challenge text:
yodawg.jpg 50 ---
steghide was found on the hackers computer. https://scoreboard.openctf.com/yodawg.jpg-a5f90bcb58c65886c8b40623ad5bf73ae62545bc
This file is a tar.gz containing yodawg.jpg. From the hint we know that the steghide tool was used hide another file in this jpg. steghide needs a passphrase; the jpg file happens to represent the flag of Gabon and Gabon was indeed the passphrase used to hide the data:
| apiVersion: v1 | |
| kind: PersistentVolume | |
| metadata: | |
| annotations: | |
| pv.kubernetes.io/bound-by-controller: "yes" | |
| pv.kubernetes.io/provisioned-by: local-volume-provisioner-k8s-01-2bb98394-3734-11e7-956b-00505699a646 | |
| volume.alpha.kubernetes.io/node-affinity: '{"requiredDuringSchedulingIgnoredDuringExecution":{"nodeSelectorTerms":[{"matchExpressions":[{"key":"kubernetes.io/hostname","operator":"In","values":["k8s-01"]}]}]}}' | |
| creationTimestamp: 2017-07-02T17:16:17Z | |
| name: local-pv-87b4a99e | |
| resourceVersion: "11478333" |
I hereby claim:
To claim this, I am signing this object:
| { | |
| "firewall": { | |
| "all-ping": "enable", | |
| "broadcast-ping": "disable", | |
| "group": { | |
| "address-group": { | |
| "authorized_guests": { | |
| "description": "authorized guests MAC addresses" | |
| }, | |
| "guest_allow_addresses": { |
| --- | |
| - name: ensure wheezy-backports is present | |
| apt_repository: repo="deb http://ftp.nl.debian.org/debian/ wheezy-backports main contrib non-free" state=present update_cache=yes | |
| when: ansible_distribution_release == 'wheezy' | |
| - name: ensure jessie-backports is present | |
| apt_repository: repo="deb http://ftp.nl.debian.org/debian/ jessie-backports main contrib non-free" state=present update_cache=yes | |
| when: ansible_distribution_release == 'jessie' |
| package io.pivotal.literx; | |
| import org.junit.Test; | |
| import reactor.core.publisher.Flux; | |
| public class Sample { | |
| @Test | |
| public void sample() { | |
| Flux<Integer> flux = Flux.just(1, 2, 3); | |
| flux.log().sampleMillis(1000).subscribe(a -> System.out.println("Subscribe: " + a)); |
| package reactor.core; | |
| import org.junit.Test; | |
| import org.slf4j.Logger; | |
| import org.slf4j.LoggerFactory; | |
| import reactor.core.publisher.ConnectableFlux; | |
| import reactor.core.publisher.Flux; | |
| import reactor.core.scheduler.Schedulers; | |
| import reactor.test.TestSubscriber; |
| package org.eclipse.aether.examples; | |
| import org.eclipse.aether.DefaultRepositorySystemSession; | |
| import org.eclipse.aether.RepositorySystem; | |
| import org.eclipse.aether.RepositorySystemSession; | |
| import org.eclipse.aether.artifact.Artifact; | |
| import org.eclipse.aether.artifact.DefaultArtifact; | |
| import org.eclipse.aether.collection.CollectRequest; | |
| import org.eclipse.aether.examples.util.Booter; | |
| import org.eclipse.aether.graph.Dependency; |
| .encoding = "UTF-8" | |
| config.version = "8" | |
| virtualHW.version = "11" | |
| nvram = "testserver6.nvram" | |
| pciBridge0.present = "TRUE" | |
| svga.present = "TRUE" | |
| pciBridge4.present = "TRUE" | |
| pciBridge4.virtualDev = "pcieRootPort" | |
| pciBridge4.functions = "8" | |
| pciBridge5.present = "TRUE" |