Cemalettin Yılmaz Blog
Google CTF 2019 Enter Space-Time Coordinates Ok well done. The console is on. It’s asking for coordinates. Beating heavily on the console yields little results, but the only time anything changes on your display is when you put in numbers.. So what numbers are you going to go for? You see the starship’s logs, but…
Google CTF 2018 Message Of The Day From the OffHub router, you jump onto the Google-Haus smart hub. This fully feature assistant of the future that uses machine learning on the blockchain to control all our IoT devices promises it all. It delivers the ability to print a Message-of-the-day. The rest is available as a…
Google CTF 2018 Firmware The code quality here is terrible. Even the temperature scale is measured in “Kevins”. Just bad Q/A all around here. If they choose to measure in Kevins rather than Kelvins, then it’s a sure bet that they can’t handle their memory properly. It looks like this also controls the SmartFridge2000 internal…
Google CTF 2018 Admin UI 3 The code quality here is terrible. Even the temperature scale is measured in “Kevins”. Just bad Q/A all around here. If they choose to measure in Kevins rather than Kelvins, then it’s a sure bet that they can’t handle their memory properly. It looks like this also controls the…
Google CTF 2018 Admin UI 2 That first flag was a dud, but I think using a similar trick to get the full binary file might be needed here. There is a least one password in there somewhere. Maybe reversing this will give you access to the authenticated area, then you can turn up the…
Google CTF 2018 Router-UI Using the domain found on the hardened aluminum key, you make your way on to the OffHub router. A revolutionary device that simplifies your life. You’re at the UI page, but attempting to brute force the password failed miserably. If we could find an XSS on the page then we could…
Google CTF 2018 Admin UI The command you just found removed the Foobanizer 9000 from the DMZ. While scanning the network, you find a weird device called Tempo-a-matic. According to a Google search it’s a smart home temperature control experience. The management interface looks like a nest of bugs. You also stumble over some gossip…
Google CTF 2018 Floppy 2 Looks like you found a way to open the file in the floppy! But that www.com file looks suspicious.. Dive in and take another look? You can find my all CTF solution in here For the first floppy CTF we find the www.com file but we didn’t use that. I…