Google CTF 2018 Message Of The Day From the OffHub router, you jump onto the Google-Haus smart hub. This fully feature assistant of the future that uses machine learning on the blockchain to control all our IoT devices promises it all. It delivers the ability to print a Message-of-the-day. The rest is available as a…
Category: 2018
Firmware | Google CTF 2018
Google CTF 2018 Firmware The code quality here is terrible. Even the temperature scale is measured in “Kevins”. Just bad Q/A all around here. If they choose to measure in Kevins rather than Kelvins, then it’s a sure bet that they can’t handle their memory properly. It looks like this also controls the SmartFridge2000 internal…
Admin UI 3 | Google CTF 2018
Google CTF 2018 Admin UI 3 The code quality here is terrible. Even the temperature scale is measured in “Kevins”. Just bad Q/A all around here. If they choose to measure in Kevins rather than Kelvins, then it’s a sure bet that they can’t handle their memory properly. It looks like this also controls the…
Admin UI 2 | Google CTF 2018
Google CTF 2018 Admin UI 2 That first flag was a dud, but I think using a similar trick to get the full binary file might be needed here. There is a least one password in there somewhere. Maybe reversing this will give you access to the authenticated area, then you can turn up the…
Router-UI | Google CTF 2018
Google CTF 2018 Router-UI Using the domain found on the hardened aluminum key, you make your way on to the OffHub router. A revolutionary device that simplifies your life. You’re at the UI page, but attempting to brute force the password failed miserably. If we could find an XSS on the page then we could…
Admin UI | Google CTF 2018
Google CTF 2018 Admin UI The command you just found removed the Foobanizer 9000 from the DMZ. While scanning the network, you find a weird device called Tempo-a-matic. According to a Google search it’s a smart home temperature control experience. The management interface looks like a nest of bugs. You also stumble over some gossip…
Floopy 2 | Google CTF 2018
Google CTF 2018 Floppy 2 Looks like you found a way to open the file in the floppy! But that www.com file looks suspicious.. Dive in and take another look? You can find my all CTF solution in here For the first floppy CTF we find the www.com file but we didn’t use that. I…
JS Safe | Google CTF 2018
Google CTF 2018 Floppy Well it’s definitely the 90s. Using what was found in the mysterious .ico file, you extract the driver for the Aluminum-Key Hardware password storage device. Let’s see what it has in store. You can find my all CTF solution in here First I downloaded the attachment.This include HTMl file when I open…