-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
990e381
commit c5100c7
Showing
9 changed files
with
168 additions
and
44 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,2 +1,34 @@ | ||
# gt-beginner-quest-2024 | ||
Grant Thornton Beginner Quest 2024 | ||
![Grant thornton Beginner Quest](_assets/gtbq.png) | ||
# Grant Thornton Beginner Quest 2024 | ||
|
||
**Dates:** 05/07/2024 - 14/07/2024 | ||
|
||
## Repository Structure | ||
|
||
This is the official repository with the challenges published in Grant Thornton Beginner Quest (GTBQ) CTF 2024. Each challenge has a public, solution and setup folder (if applicable) and is accompanied with a short description. The setup folder contains all the files required to build and host the challenge and usually contains the flag and a proof of concept solution as well. The public folder contains the files that are released to the participant during the competition. | ||
|
||
## Dependencies | ||
|
||
Although some of the challenges may run as is, it is recommended that you have docker and docker-compose installed and use the provided scripts to run the challenges to ensure isolation and therefore proper environment setup. | ||
|
||
## Challenges | ||
|
||
|
||
### misc | ||
|
||
| Name | Author | | ||
| ---- | ------ | | ||
| [Brute Willis](./misc/Brute-Willis) | tratrafe2 | | ||
| [c4lcu1at0r](./misc/c4lcu1at0r) | cfalas | | ||
| [secret-key](./misc/secret-key) | tratrafe2 | | ||
|
||
|
||
|
||
### web | ||
|
||
| Name | Author | | ||
| ---- | ------ | | ||
| [Baby Flask](./web/baby-flask) | Evangelospro | | ||
| [Flask Master](./web/flask-master) | Evangelospro | | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,15 @@ | ||
# Brute Willis | ||
|
||
|
||
**Category**: misc | ||
|
||
**Author**: tratrafe2 | ||
|
||
## Description | ||
|
||
Brute willis and henry Force are up to something. We found this script they used to generate a flag. However, the program they used only allows them to have a 6-digit pin. | ||
|
||
You may need to install the python module pycryptodomex | ||
python -m pip install pycryptodomex | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,22 +1,15 @@ | ||
# Brute Willis | ||
**Category**: Misc | ||
|
||
**Author**: tratrafe2 | ||
|
||
**Difficulty**: Medium | ||
|
||
## Description | ||
Brute willis and henry Force are up to something. We found this script they used to generate a flag. However, the program they used only allows them to have a 6-digit pin. | ||
|
||
You may need to install the python module pycryptodomex | ||
python -m pip install pycryptodomex | ||
|
||
## Solution | ||
<details> | ||
<summary>Reveal Spoiler</summary> | ||
|
||
Brute force the 6-digit pins to get the solution | ||
|
||
Flag: "GTBQ{Brut3_F0rc3_s0m3t1m35_w0rk5}" | ||
|
||
</details> | ||
# Brute Willis | ||
|
||
|
||
**Category**: misc | ||
|
||
**Author**: tratrafe2 | ||
|
||
## Description | ||
|
||
Brute willis and henry Force are up to something. We found this script they used to generate a flag. However, the program they used only allows them to have a 6-digit pin. | ||
|
||
You may need to install the python module pycryptodomex | ||
python -m pip install pycryptodomex | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,26 @@ | ||
# c4lcu1at0r | ||
|
||
[![Try in PWD](https://raw.githubusercontent.com/play-with-docker/stacks/master/assets/images/button.png)](https://labs.play-with-docker.com/?stack=https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/misc/c4lcu1at0r/docker-compose.yml) | ||
|
||
|
||
**Category**: misc | ||
|
||
**Author**: cfalas | ||
|
||
## Description | ||
|
||
Back in the old days, people used to calculate things using a calculator. Nowadays, we have computers to do that for us. Can it still do the job? | ||
|
||
|
||
|
||
## Run locally | ||
|
||
Launch challenge: | ||
``` | ||
curl -sSL https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/misc/c4lcu1at0r/docker-compose.yml | docker compose -f - up -d | ||
``` | ||
|
||
Shutdown challenge: | ||
``` | ||
curl -sSL https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/misc/c4lcu1at0r/docker-compose.yml | docker compose -f - down | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,12 @@ | ||
# secret-key | ||
|
||
|
||
**Category**: misc | ||
|
||
**Author**: tratrafe2 | ||
|
||
## Description | ||
|
||
while trying to investigate tHe files of a criminal, we found this wEird key_X.txt file. however, it doesn't seem to have any meaning. mayBe it's An encoded mesSagE that we should try to re6ognize and cr4ck it. let's tRy Our besT! | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,20 +1,12 @@ | ||
# Secret key | ||
**Category**: Misc | ||
|
||
**Author**: tratrafe2 | ||
|
||
**Difficulty**: Easy | ||
|
||
## Description | ||
while trying to investigate tHe files of a criminal, we found this wEird key_X.txt file. however, it doesn't seem to have any meaning. mayBe it's An encoded mesSagE that we should try to re6ognize and cr4ck it. let's tRy Our besT! | ||
|
||
## Solution | ||
<details> | ||
<summary>Reveal Spoiler</summary> | ||
|
||
The goal of this challenge is to recognize the format of Base64 and Hex, and finally face a simple substitucion cipher (rot13). | ||
Decode from hex, from b64, from b64, from hex, rot13. | ||
|
||
Flag: "GTBQ{3nc0d1ng_15_r3ally_c00l_but_n0t_s0_saf3!}" | ||
|
||
</details> | ||
# secret-key | ||
|
||
|
||
**Category**: misc | ||
|
||
**Author**: tratrafe2 | ||
|
||
## Description | ||
|
||
while trying to investigate tHe files of a criminal, we found this wEird key_X.txt file. however, it doesn't seem to have any meaning. mayBe it's An encoded mesSagE that we should try to re6ognize and cr4ck it. let's tRy Our besT! | ||
|
||
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,26 @@ | ||
# Baby Flask | ||
|
||
[![Try in PWD](https://raw.githubusercontent.com/play-with-docker/stacks/master/assets/images/button.png)](https://labs.play-with-docker.com/?stack=https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/web/baby-flask/docker-compose.yml) | ||
|
||
|
||
**Category**: web | ||
|
||
**Author**: Evangelospro | ||
|
||
## Description | ||
|
||
I always loved being organized, so I decided to create a file manager that will help me keep my files in order. Please, don't mess with my files, I have a lot of important stuff in there! I mean you can't get the flag or something, right? | ||
|
||
|
||
|
||
## Run locally | ||
|
||
Launch challenge: | ||
``` | ||
curl -sSL https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/web/baby-flask/docker-compose.yml | docker compose -f - up -d | ||
``` | ||
|
||
Shutdown challenge: | ||
``` | ||
curl -sSL https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/web/baby-flask/docker-compose.yml | docker compose -f - down | ||
``` |
Empty file.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,28 @@ | ||
# Flask Master | ||
|
||
[![Try in PWD](https://raw.githubusercontent.com/play-with-docker/stacks/master/assets/images/button.png)](https://labs.play-with-docker.com/?stack=https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/web/flask-master/docker-compose.yml) | ||
|
||
|
||
**Category**: web | ||
|
||
**Author**: Evangelospro | ||
|
||
## Description | ||
|
||
Flask Master is the sequel to Baby Flask. | ||
|
||
I always loved being organized, so I decided to create a file manager that will help me keep my files in order. Please, don't mess with my files, I have a lot of important stuff in there! I mean you can't get the flag or something, right? Can you get it now that the logs are gone? | ||
|
||
|
||
|
||
## Run locally | ||
|
||
Launch challenge: | ||
``` | ||
curl -sSL https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/web/flask-master/docker-compose.yml | docker compose -f - up -d | ||
``` | ||
|
||
Shutdown challenge: | ||
``` | ||
curl -sSL https://raw.githubusercontent.com/cybermouflons/gt-beginner-quest-2024/master/web/flask-master/docker-compose.yml | docker compose -f - down | ||
``` |