English challenges write-ups compilation + extra stego

Apparently the image on the left is a funny but normal picture. However, this image contains a secret message. We talked about steganography, the art and science of writing hidden messages, and this one could be a hacking challenge or wargame level.

Hackers and computer security enthusiasts around the world play to resolve this and other types of hacking challenges: cryptography, forensics, crackmes, web exploits, etc. are just examples of categories that can be found.

Previously we published a Spanish write-ups compilation and now we present a new list in English. If you follow and read these links you will enter a fascinating world of mind games and can learn to use many sophisticated hacker techniques. And who knows, you might be able to reveal the hidden message of the horse image in this post ... ;-)

Please comment this post if you know more interesting write-ups!:

vnSecurity

DEFCON 18 Quals: Pwtent Pwnables 500 write up [05/2010] - vnsec
DEFCON 18 Quals: Pwtent Pwnables 500 exploit [05/2010] - vnsec
DEFCON 18 Quals: writeups collection [05/2010] - vnsec
Return-oriented-programming practice: exploiting CodeGate 2010 Challenge 5 [04/2010] - vnsec
CodeGate 2010 Challenge 15 – SHA1 padding attack [03/2010] - vnsec
Codegate 2010 Challenge 12 writeup [03/2010] - vnsec
Codegate 2010 Challenge 11 writeup [03/2010] - vnsec
CodeGate 2010 – Challenge 8: Bit-flipping attack on CBC mode [03/2010] - vnsec
CodeGate 2010 – Challenge 7: Weak SSL Cracking [03/2010] - vnsec
CodeGate 2010 – Challenge 6 writeup [03/2010] - vnsec
Codegate 2010 online CTF – Challenge 4 & 5 writeup [03/2010] - vnsec
CodeGate 2010 Challenge 2 – Xbox pwned [03/2010] - vnsec
HITB 2009 C1 [01/2010] - vnsec
Sapheads HackJam C6 [10/2009] - vnsec
Sapheads HackJam C8 [10/2009] - vnsec
ISEC 2009 C3 [08/2009] - vnsec
ISEC 2009 C4 [08/2009] - vnsec
ISEC 2009 C6 [08/2009] - vnsec
ISEC 2009 C12 [08/2009] - vnsec
WOWHACKER CTF WEB [08/2009] - vnsec
WOWHACKER CTF CRYPTO [08/2009] - vnsec
WOWHACKER CTF C2,9 [08/2009] - vnsec
WOWHACKER CTF C15,16 [08/2009] - vnsec
HITB 2007 C1 [09/2007] - vnsec
HITB 2007 C5 [09/2007] - vnsec
HITB 2007 C7 [09/2007] - vnsec

stalkr

Write-up on RootBSD's forensics challenge [07/2010] - stalkr
smpCTF challenge #5 write-up - Forensic [07/2010] - stalkr
smpCTF challenge #3 write-up [07/2010] [07/2010] - stalkr
Defcon 18 CTF quals writeup - Forensics 100 [05/2010] - stalkr
Defcon 18 CTF quals writeup - Packet 200 [05/2010] - stalkr
Defcon 18 CTF quals writeup - Trivial 200 [05/2010] - stalkr
Defcon 18 CTF quals writeup - Packet 100 [05/2010] - stalkr
Write-up Codegate 2010 #17 - Crypto, Linear Congruential Generators and Vernam Cipher, the power of XOR [03/2010] - stalkr
Write-up Codegate 2010 #19 - Forensic, introduction to the Sleuth Kit and Autopsy [03/2010] - stalkr
Write-up Codegate 2010 #7 - Decrypting HTTPS SSL/TLSv1 using RSA 768bits with Wireshark [03/2010] - stalkr

zoidberg

Challenge 5 Write-Up – SMP CTF 2010 Hacker Olympics… [07/2010] - zoidberg
Challenge 4 Write-Up – SMP CTF 2010 Hacker Olympics… [07/2010] - zoidberg
Challenge 1 & 2 Write-Up – SMP CTF 2010 Hacker Olympics… [07/2010] - zoidberg

dani

Crackme 4 - Linux Crackme [02/2008] - dani
Crackme 3 - RSA [01/2008] - dani
Crackme 2 [01/2008] - dani
Crackme 1 [01/2008] - dani

xorl

cyclops’s NTS-Crackme10 Solution [07/2009] - xorl
Funny crackme [03/2009] - xorl
raptor’s Integer Overflow No. 2 [01/2009] - xorl
raptor’s Integer Overflow No. 1 [01/2009] - xorl
Warming up on Stack No. 5 [01/2009] - xorl
Warming up on Stack No. 4 [01/2009] - xorl
Warming up on Stack No. 3 [01/2009] - xorl
Warming up on Stack No. 2 [01/2009] - xorl
Warming up on Stack No. 1 [01/2009] - xorl

sexypandas

POC’08 Scripting #1 (Woos writeup) [11/2008] - sexypandas
Defcon CTF’08 Kryptod writeup [09/2008] - sexypandas
Reversing 500 writeup! [06/2008] - sexypandas

nopsr.us

Defcon 2008 CTF [2008] - nopsr.us
Defcon 2008 Quals [2008] - nopsr.us
Defcon 2007 CTF [2007] - nopsr.us
Defcon 2007 Quals [2007] - nopsr.us
Defcon 2006 CTF [2006] - nopsr.us
Defcon 2006 Quals [2006] - nopsr.us

sapheads

Writeup of Binary 500 from DefCon CTF 2009 Qualifier [07/2009] - sapheads
Defcon 2009 BIN500 [2009] - sapheads
Defcon 2009 BIN300 [2009] - sapheads
Defcon 2009 BIN100 [2009] - sapheads

coma

CODEGATE2010 CTF Level 11 [03/2010] - coma
CODEGATE2010 CTF Level 4 [03/2010] - coma
CODEGATE2010 CTF Level 1 [03/2010] - coma

KOrUPt

Defcon CTF 2009 Potent Pwnable’s 200 write up [06/2009] - KOrUPt
Defcon CTF 2009 Trivia 400 write up [06/2009] - KOrUPt
DefCon CTF 2008: CatDoorD Walk-Through [2008] - KOrUPt

others

lulzteam smpCTF 2010 writeup [2010] - lulzteam
Reto Campus Party Valencia 2010 [2010] - vierito
Crypto04 challenge write-up from Campus Party Europe - vierito
CodeGate 2010 CTF - Challenge 8: Bit-flipping attack on CBC mode [03/2010] - Nam Nham
CodeGate 2010 CTF - Challenge 7: Weak SSL Cracking [03/2010] - Nam Nham
CODEGATE2010 CTF Level 19 [2010] - hempel
CODEGATE2010 CTF Level 3 [2010] - hempel
CodeGate 2010 Online CTF: writeups [03/2010] - LongbLog
Defcon 18 CTF Writeup - Packet Madness 400 [05/2010] - bashrc
Defcon 18 CTF Writeup - Binary L33tness 500 [05/2010] - bashrc
Last Panda Challenge 2010 write-up [05/2010] - vos.uz
RootedCON CTF write-up ‘hello’ challenge [03/2010] - Sanfélix
Writeup Challenge 9 du CTF Codegate [03/2010] - Gu1
Defcon 2009 Quals [2009] - TeamAwesome
CONFidence 2009 ESET crackme - solution [05/2009] - gynvael
CodeGate 2009 [03/2009] - TeamCLGT
CodeGate 2009's Challenge 18 - Diffie-Hellman parameter tampering case study [03/2009] - thaidn
How to Exploit Stack Overflow Daemon6 at HITB 2009 KL CTF and losing by a Pyongyang Nuclear Attack [10/2009] - d3ck4
ENOFLAG's Hackjam Writeup [2009] - enoflag
HUST 8th write-up [10/2009] - cylab
The (almost) complete walkthrough of the iCTF 2008 [2008] - Nordholz/Golde
VBReFormer: CrackMe Sample #1 [11/2008] - warning
HITB 2007 - CTF Daemon 03 writeup [09/2007] - WabiSabiLabi
Tutorial for 'A crackme for Newbies' [03/2005] - DaXXoR
CrackMe #2 by ReWolf [07/2004] - Kreet
Reversing the Hell out of Muad'Dib's ReverseMe1 [04/2000] - CaptRE
crackmes.de
BiW Reversing

Comentarios

  1. lost-perdidos5 de octubre de 2010, 0:41

    Less than 10 minutes.
    I've always liked snooping! :)

    ResponderEliminar
  2. Vicente Motos5 de octubre de 2010, 8:47

    I know, it's easy. Note that it is only an introduction to steganography. When I make a serious challenge may spend more than 10 minutes, just maybe ;-)

    ResponderEliminar
  3. Lpoi19 de septiembre de 2011, 5:04

    Buenas! antes que nada muy buenos TODOS los retos la verdad que me mantienen divertido jaja. Tengo una pregunta con respecto a este ya que acostumbro a hacerlos y despues ver la solucion, pero de este no hay. La clave que yo consegui es algo bastante extraño osea son letras pero no tienen ningun sentido, es asi? o la clave es algo con sentido?

    ResponderEliminar
  4. Vicente Motos19 de septiembre de 2011, 14:44

    @Lpoi gracias por ponerte con nuestros retos. A ver si saco tiempo y publico el nº 13...

    Respecto a este stego la solución está en el primer comentario de este post.

    La frase que has obtenido está cifrada con un algoritmo de sustitución...http://rumkin.com/tools/cipher/atbash.php

    Saludos!

    ResponderEliminar

Publicar un comentario