http://tribectf.cs.wm.edu/writeups/2024/Recent content in TribeCTF 2024 Write-ups on TribeCTF 2026Hugoen-usMon, 04 Nov 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/open-sesame/Mon, 04 Nov 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/open-sesame/This challenge named Open Sesame was a basic reverse engineering challenge that involved file formats and basic ELF reversing. To start you are given a file named open_sesame.wav, however it is not what it appears. By first running file on the binary we can see it is in fact not a WAV file. This is a common trick to hide and obfuscate files as file extensions really mean nothing unless you are on Windows.http://tribectf.cs.wm.edu/writeups/2024/old-school/Sun, 03 Nov 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/old-school/This challenge named Old School is a nod back to the old days NES. In this challenge you are given 2 files альфа and Жнец.bin. Jumping straight into the challenge the first thing we can do is use the file command to try and see what kind of files we are dealing with. ❯ file альфа альфа: ELF 64-bit LSB pie executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=2970d4e8f12c7fffc8af9ef296dd4f2877d82226, for GNU/Linux 3.http://tribectf.cs.wm.edu/writeups/2024/back-in-time/Sat, 02 Nov 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/back-in-time/This challenge named Back In Time was one of the easier challenges in the Forensics category. For this challenge, you were given a single file BackInTime.zip. After unzipping the file and taking a look at it, we can see that there is a single directory named src_repo. If we enter into this repo, we can see many different folder, one of which is named .git. This indicates that we are looking at a git repo and this challenge is likely some kind of git forensics challenge.http://tribectf.cs.wm.edu/writeups/2024/crown-jewel/Sat, 02 Nov 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/crown-jewel/This challenge named Crown Jewel was one of the easier challenges in the Forensics category. For this challenge, you were given a single file ISC4.png. Upon first glance, this file would look completely normal, however, for those experienced with image forensics or a quick google search would likely tell you this is some kind of steganography challenge. Doing a quick google search of steg online you can come across the following website https://www.http://tribectf.cs.wm.edu/writeups/2024/brickworks/Wed, 23 Oct 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/brickworks/Write-up coming soon!http://tribectf.cs.wm.edu/writeups/2024/griffins-location/Wed, 23 Oct 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/griffins-location/Write-up coming soon!http://tribectf.cs.wm.edu/writeups/2024/griffins-treasure/Wed, 23 Oct 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/griffins-treasure/Write-up coming soon!http://tribectf.cs.wm.edu/writeups/2024/lang-syne-labyrinth/Wed, 23 Oct 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/lang-syne-labyrinth/Write-up coming soon!http://tribectf.cs.wm.edu/writeups/2024/the-first-flag/Wed, 23 Oct 2024 00:00:00 +0000http://tribectf.cs.wm.edu/writeups/2024/the-first-flag/The first flag was hidden in plain sight. The instruction pointed you to the rules page. You had to look up the source from the browser, and search for flag. You would end up getting this snippet. <div style=display:none>Hint: Decode me to find the flag format! dHJpYmVjdGZ7eW91cl9mbGFnX2hlcmV9 </div> You could then use any Base64 decoder to get the flag format.