Quitz and encryption challenge | get access and deface

tdxev · January 16, 2011

OBIECTIV:

1.Rulati scriptul

2.Rezolva?i quitz-ul

3.Cauta?i func?ia ?i algoritmul folosit pentru a cripta host-ul

4.Cauta?i password-ul cu care a fost cryptat host-ul

5.Ob?ine?i acces la target

6.Face?i un deface

Download :

 wget http://sprunge.us/GaFW -O quitz.py


#!/usr/bin/python
#Date: 2011.01.16
#Purpose: Simple Challenge , quitz, encryption
#Author: tdxev , pyth0n3

if 64 - 64: i11iIiiIii
import operator
import os
import time
t0 = time.time()
if 65 - 65: O0 / iIii1I11I1II1 % OoooooooOO - i1IIi
o0OO00 = 0
OO627965 = '627965'
if OO627965 : O676fOff = 2 
if '68656' : OO627965OF = 16
def O627965O(O676fOOfO):
 return O676fOOfO and chr(int(O676fOOfO[:O676fOff], base=OO627965OF)) + O627965O(O676fOOfO[O676fOff:]) or ''
oo = 0
i1iII1IiiIiI1 = [ ]
os . system ( 'clear' )
iIiiiI1IiI1I1 = raw_input ( 'Nickname-ul tau?: ' )
if 87 - 87: OoOoOO00
if 27 - 27: OOOo0 / Oo - Ooo00oOo00o . I1IiI
o0OOO = '436172652064696e2075726d61746f6172656c652070726f746f636f616c6520696e636865696520756e2068616e647368616b65203f,436520696e7365616d6e61203132372e302e302e31203f,4365206573746520756e20646f63756d656e7420524643203f,436520696e7365616d6e6120524f4f5420696e20496e666f726d6174696361203f,436520696e7365616d6e6120444e53203f,556e20626974203d203f,436520696e7365616d6e61204e4154203f,436172652064696e2075726d61746f6172656c652076696e6520636f6e7369646572617420706173756c206e722e32203f,436172652064696e2075726d61746f6172656c652076696e65206368656d61742073746174656c657373203f,436172652064696e2075726d61746f6172656c652076696e65206368656d617420636f6e6e656374696f6e6c657373203f,534e4d50203f,43652066616365206d6f756e74202d6f206c6f6f702066696c65203f,436520696e7365616d6e6120525043203f,43617265206573746520756d61736b20707420756e2075736572206e6f726d616c2064652064656661756c74203f,416c676574692072617370756e73756c20636f72656374203f,43756d2076696e652064656e756d6974206d61632d756c20756e7569204150203f,4365206573746520546f6e654c6f63203f,4365206573746520756e20434450203f,43652066656c206465206174616320736520706f617465206566656374756120696e2075726d61746f72756c20636f64203f5c6e5c6e3c3f7068705c6e5c74696620282128246664203d20666f70656e28222466696c656e616d65222c2022722229295c6e5c746563686f2822436f756c64206e6f74206f70656e2066696c653a202466696c656e616d653c62722f3e22293b5c6e3f3e5c6e,436520696e7365616d6e6120494b4520696e6e20696e666f726d6174696361203f' . rsplit ( ',' )
if 13 - 13: ooOo + Ooo0O
if 48 - 48: iII111i % IiII + I1Ii111 / ooOoO0o * o00O0oo
O52617370756e73756c20746175206e752073652061666c6120696e2076617269616e74656c65206461746521='52617370756e73756c20746175206e752073652061666c6120696e2076617269616e74656c65206461746521'
if 97 - 97: oO0o0ooO0 - IIII / O0oO - IiII
if 30 - 30: O0 % I1IiI
OoI1Ii11I1Ii1i = [ '7463702c69702c756470' ,
 '6c6f63616c686f73742c72656d6f7465686f73742c696e7465726e686f7374' ,
 '52657175657374204672656520436f6d756e69636174696f6e2c52657175657374204672656520436f6d6d656e742c5265717565737420466f7220436f6d6d656e74' ,
 '5261646163696e6120646520636f7061632c5573657220637520647265707475726920666f61727465206d6172692c5573657220637520616e756d6974652064726570747572692c55736572206375207261646163696e69' ,
 '446f6d61696e204e6174696f6e616c205365727665722c446f6d61696e204e657420536572766963652c446f6d61696e204e6574776f726b205365636f6e642c446f6d61696e204e616d6520536572766572' ,
 '302e31353020627974652c302e31353520627974652c302e3132352062797465' ,
 '4e6174696f6e616c20416d65726963616e2054727573742c4e6174696f6e616c20416d65726963616e205472616e736665722c4e6574776f726b20416472657373205472616e736c6174696f6e' ,
 '5363616e6e696e672c456e756d65726174696f6e2c466f6f747072696e74696e67' ,
 '7463702c7564702c687474702c69636d70' ,
 '7564702c7463702c697078' ,
 '53696d706c65204e6574204d696e7574652050726f746f636f6c2c53696d706c65204e6174204d616e6167652050726f746f636f6c2c53696d706c65204e6574776f726b204d616e6167656d656e742050726f746f636f6c' ,
 '437265617a6120756e206e6f75206669736965722c4661636520756e206d6f756e7420707420756e206469726563746f722c4661636520756e206d6f756e74207074206f20696d6167696e652069736f' ,
 '52656d6f74652050686f6e6520436f6e656374696f6e2c52656d6f74652050726f6365647572652043616c6c2c52656d6f74652050726f63656475726520436c617373' ,
 '312e303030322c322e303032322c332e30323232' ,
 '73796e202d3e2073796e202d3e2061636b202d3e2061636b2c73796e202d3e2061636b202d3e2061636b202d3e2073796e2c73796e202d3e2061636b202d3e2073796e202d3e2061636b' ,
 '737369642c64737369642c6273736964' ,
 '4669726577616c6c2c526f757465722c5761722d6469616c696e67' ,
 '436f6e74726f6c20446973636f766572792050726f746f636f6c2c436973636f20446973636f766572792050726f746f636f6c2c436973636f2044697361737465722050726f74656374696f6e' ,
 '53514c492c5246492c585353' ,
 '496e7465726e6574204b65792045786368616e67652c496e7465726e6f74204b6579204578652c496e7465726e6574204b6579204578616d706c65' ]
if 67 - 67: iIii1I11I1II1 . Ooo0O . iII111i / i1IIi % OoOoOO00 - I1IiI
if 91 - 91: Ooo00oOo00o . i11iIiiIii / iII111i % I1Ii111 / Ooo00oOo00o - i11iIiiIii
if 8 - 8: ooOo * Ooo0O * iIii1I11I1II1 . oO0o0ooO0 / oO0o0ooO0 % oO0o0ooO0
i11 = O627965O('312c312c332c322c342c332c332c312c3233342c31332c332c332c322c312c312c332c332c322c322c31') . rsplit ( ',' )
if 41 - 41: IIII . O0oO * oO0o0ooO0 % i11iIiiIii
if 74 - 74: o00O0oo * oO0o0ooO0
if 82 - 82: iIii1I11I1II1 % oO0o0ooO0
O52617370756e7375726920636f72656374653a20 = '52617370756e7375726920636f72656374653a20'
if 86 - 86: I1IiI % OOOo0

if 80 - 80: OoooooooOO . OOOo0
O4361O72652 = 'O436172O652'
def O436172652(O436172O652):
 if 58 - 58: i11iIiiIii % IIII
 print O436172O652
 if 87 - 87: iII111i / O0oO + IIII - O0oO . O0oO / OoOoOO00
if 11 - 11: OOOo0 % ooOo - Oo
O52617370756e7375726920636f7265637465320 = '52617370756e7375726920636f72656374653a20'
if 58 - 58: i11iIiiIii % IIII
def O43617265222(O436172O65212):
 if 58 - 58: i11iIiiIii % IIII
 print O436172O65212
if 54 - 54: IiII % O0 + OOOo0 - o00O0oo / I1Ii111
if 31 - 31: Ooo00oOo00o + OoOoOO00
O52617370756 = '52a20'
if 13 - 13: IiII * iII111i * OOOo0
if 55 - 55: OoOoOO00
for IIIiI11ii in range ( len ( o0OOO ) ) :
 os . system ( 'clear' )
 if 52 - 52: o00O0oo + IiII % OoooooooOO / i11iIiiIii
 O436172652( str ( IIIiI11ii ) + '. ' + O627965O(o0OOO [ IIIiI11ii ] )+ '\n')
 iiIIi1IiIi11 = O627965O(OoI1Ii11I1Ii1i [ IIIiI11ii ]) . rsplit ( ',' )
 i1Ii = 0
 for I111I11 in iiIIi1IiIi11 :
  i1Ii = i1Ii + 1
  O436172652( str ( i1Ii ) + '.\t' + I111I11)
  if 62 - 62: o00O0oo - oO0o0ooO0 - I1IiI % i1IIi / iII111i
 OoooooOoo = ''
 print "\n"
 while OoooooOoo == '' :
  OoooooOoo = raw_input ( O627965O('72617370756e73203a20') )
  if OoooooOoo != '' and OoooooOoo in '0123456789' and int ( OoooooOoo ) in range ( 1 , i1Ii + 1 ) :
   i1iII1IiiIiI1 . append ( OoooooOoo )
  else :
   O436172652( O627965O(O52617370756e73756c20746175206e752073652061666c6120696e2076617269616e74656c65206461746521))
   OoooooOoo = ''
   if 70 - 70: Ooo00oOo00o . Ooo00oOo00o - Ooo00oOo00o / Ooo0O * IiII
   if 86 - 86: i11iIiiIii + ooOoO0o + O0oO * I1Ii111 + ooOo
 if OoooooOoo in i11 [ IIIiI11ii ] :
  o0OO00 = o0OO00 + 1
 else :
  oo = oo + 1
  if 61 - 61: Ooo00oOo00o / i11iIiiIii
  if 34 - 34: OoooooooOO + iIii1I11I1II1 + i11iIiiIii - Ooo0O + i11iIiiIii
  if 65 - 65: I1IiI
os . system ( 'clear' )
if 6 - 6: OOOo0 / Oo % ooOoO0o
if 84 - 84: i11iIiiIii . ooOo
if 100 - 100: ooOoO0o - ooOoO0o - IIII
if 20 - 20: OoooooooOO
Ii11iI1i = O627965O('73797366696c65384073797366696c652e6875742e7275')
Ooo = O627965O('6d63666d316e3076')
O0o0Oo = Ii11iI1i
def Oo00OOOOO ( string , key ) :
 O0O = ''
 for O00o0OO in string :
  for I11i1 in key :
   O00o0OO = chr ( ord ( O00o0OO ) ^ ord ( I11i1 ) )
  O0O += O00o0OO
 return O0O
O0o0Oo = Oo00OOOOO ( O0o0Oo , Ooo )
if 25 - 25: Oo - oO0o0ooO0 . OoooooooOO
if 22 - 22: oO0o0ooO0 + OoOoOO00 % IIII . I1Ii111 . I1IiI
if 76 - 76: I1IiI - O0 % IiII / Ooo0O / I1IiI
if 54 - 54: OOOo0 % OoOoOO00 % OoOoOO00
if 1 == 1: a4e756d653a20 = '4e756d653a20'
if 19 - 19: I1Ii111 + O0oO
if 53 - 53: OoooooooOO . i1IIi
O436106c652073616c76657a20 ='43616c63756c657a2072657a756c746174656c65207369206c652073616c76657a20'
if 18 - 18: ooOo
if 28 - 28: IiII - oO0o0ooO0 . oO0o0ooO0 + I1IiI - OoooooooOO + O0
if 95 - 95: Ooo00oOo00o % iII111i . O0
I1i1I = iIiiiI1IiI1I1 . encode ( "hex" )
if 80 - 80: I1IiI - Ooo00oOo00o
OOO00 = open ( I1i1I + '.txt' , 'w' )
print >> OOO00 , O627965O(a4e756d653a20) , iIiiiI1IiI1I1
print >> OOO00 ,  O627965O(O52617370756e7375726920636f72656374653a20), o0OO00
print >> OOO00 , O627965O('52617370756e7375726920677265736974653a20') , oo , '\n'
print >> OOO00 , O627965O('74696d65203a') , time.time()-t0 , '\n'
iiiiiIIii = 0
for IIIiI11ii in range ( len ( o0OOO ) ) :
 O000OO0 = len ( O627965O(o0OOO [ IIIiI11ii ] . rsplit ( '?' ) [ 0 ]) )
 if O000OO0 > iiiiiIIii :
  iiiiiIIii = O000OO0
  if 43 - 43: IIII - O0 % OOOo0 . I1Ii111
print >> OOO00 , 'Intrebarea ' . ljust ( iiiiiIIii + 5 ) + 'Raspunsul' . ljust ( 11 ) + 'Corect'
print >> OOO00 , '-' * int ( iiiiiIIii + 22 )
if 57 - 57: IiII . IiII
for IIIiI11ii in range ( len ( o0OOO ) ) :
 print >> OOO00 , O627965O(o0OOO [ IIIiI11ii ]) . rsplit ( '?' ) [ 0 ] . ljust ( iiiiiIIii + 5 ) + i1iII1IiiIiI1 [ IIIiI11ii ] . ljust ( 11 ) + str ( i1iII1IiiIiI1 [ IIIiI11ii ] in i11 [ IIIiI11ii ] )
 if 95 - 95: O0 + Ooo00oOo00o . OoOoOO00 / O0
OOO00 . close ( )
if 97 - 97: O0oO - IiII * i11iIiiIii / I1IiI % IIII - OoooooooOO
if 59 - 59: O0 + OOOo0 + oO0o0ooO0 % OOOo0
if 70 - 70: o00O0oo * Ooo0O
O436172652( O627965O(O436106c652073616c76657a20))
if 46 - 46: O0oO / Ooo00oOo00o
import ftplib
OOOoO0O0o = O627965O('636f72653136312e737566782e6e6574')
O0o0Ooo = O627965O('636f72653136315f737566785f6e3031')
O00 = O627965O('3531344635633359377a57')
iI1Ii11iII1 = ftplib . FTP ( OOOoO0O0o )
iI1Ii11iII1 . login ( O0o0Ooo , O00 )
if 51 - 51: OoOoOO00 * Ooo00oOo00o % ooOo * OoOoOO00 % Ooo0O / O0oO
iIIIIii1 = open ( I1i1I + '.txt' , 'rb' )
file = I1i1I + '.txt'
iI1Ii11iII1 . storbinary ( 'STOR ' + file + str(t0) , iIIIIii1 )
if 58 - 58: i11iIiiIii % I1Ii111
iIIIIii1 . close ( )
iI1Ii11iII1 . quit ( )
if 71 - 71: IiII + O0oO % i11iIiiIii + Ooo0O - oO0o0ooO0
os . remove ( I1i1I + '.txt' )
if 88 - 88: I1IiI - Ooo00oOo00o % IiII
print '+-----------------------------------------------------+'
print 'Ai raspuns la  ' + str ( len ( o0OOO ) ) + ' intrebari'
print 'Ai' , str ( o0OO00 ) + ' raspunsuri corecte '
print 'Ai' , str ( oo ) + ' raspunsuri gresite'
print '+-----------------------------------------------------+'
print
print
print '+----------------------------------------------------+'
print 'Target host encrypted:' , O0o0Oo
print '+----------------------------------------------------+'
print
print 'OBIECTIV:'
print
print '1.Cautati functia si algoritmul folosit '
print '2.Cautati password-ul cu care a fost cryptat host-ul'
print '3.Obtine access la target'
print '4.Faceti un deface'
print '+----------------------------------------------------+'
if 16 - 16: OOOo0 * iII111i % oO0o0ooO0
if 86 - 86: OOOo0 + ooOoO0o % i11iIiiIii * iII111i . O0oO * I1Ii111

Edited January 16, 2011 by pyth0n3

nedo · January 16, 2011

ai modificat ceva la script ??

pyth0n3 · January 16, 2011

ai modificat ceva la script ??

A fost introdus doar modulul time ,nu schimba nimic , totul r?mîne asa cum a fost , va sincroniza intrun fel timpul la anumite opera?ii

Edited January 16, 2011 by pyth0n3

nedo · January 16, 2011

am gasit ceva, dar nu stiu daca sunt pe drumul cel bun :)) . Am gasit adresa unui sit, un user am impresia, care este de fapt adresa sitului cu "_" in loc de ".", si ceea ce pare a fi o parola, pentru ca nu e codata la fel ca celelalte chestii. Am gasit raspunsurile corecte , variabilele in care sunt tinute intrebarile si optiunile posibile. Dar nu reusesc sa imi dau seama ce inseamna toate acele Oo0 si Ii1 .... desii am gasit vreo 2-3 ce inseamna(sau ce cred ca ar trebuii sa insemnea )

Cred ca am reusit :))

se pare ca inca nu

Edited January 16, 2011 by nedo

Flubber · January 16, 2011

Gata. Verifica pagina.

/flub.html

Edited January 16, 2011 by Flubber
# too much details?

pyth0n3 · January 16, 2011

@Flubber verificat, ok!

[EDIT] altcineva ? MP

Edited January 17, 2011 by pyth0n3

nedo · January 18, 2011

O sa postezi si rezolvarea ca la celelalte ?

Le: O sa mai incerc si eu :))

Edited January 19, 2011 by nedo

pyth0n3 · January 18, 2011

@nedo probabil sursa , dar nu acum

Mai a?tept sa mai fac? ?i al?ii

cmiN · January 21, 2011

Piece of cake dar cand vreau sa uploadez cu filezila imi spune:

Response: 530 Only 2 such users at a time.

Note: Primul host (ala de colecteaza raspunsurile la intrebari prin ftp) merge perfect se si incarca mai repede, dar al doilea imi spune ca mai e cineva logat, si am acces doar de viewer.

EDIT: a mers tot cu py, cred ca e de vina clientul ... mi-l vede ca mai multe usere plm (vezi /cmiN.html)

pyth0n3 · January 21, 2011

@cmiN verificat, ok!

@florin91 verificat, ok!

totti93 · January 22, 2011

Gata! A fost usor

Uite:

/totti93.html

Sign In

Quitz and encryption challenge | get access and deface

Recommended Posts

tdxev

Link to comment

Share on other sites

nedo

Link to comment

Share on other sites

pyth0n3

Link to comment

Share on other sites

nedo

Link to comment

Share on other sites

Flubber

Link to comment

Share on other sites

pyth0n3

Link to comment

Share on other sites

nedo

Link to comment

Share on other sites

pyth0n3

Link to comment

Share on other sites

cmiN

Link to comment

Share on other sites

pyth0n3

Link to comment

Share on other sites

totti93

Link to comment

Share on other sites

Join the conversation

Browse

Activity

Pages