ctf/CGQ2015
2015-03-15 21:25:01 +01:00
..
decrypt.py Add CodeGate 2015 Quals stuff 2015-03-15 21:20:11 +01:00
README.md Add CGW2015 README 2015-03-15 21:25:01 +01:00
sploit.py Add CodeGate 2015 Quals stuff 2015-03-15 21:20:11 +01:00
sploit_server.py Clean up CGQ2015 OAMPizza exploit 2015-03-15 21:23:43 +01:00
their-conf.bak Add CodeGate 2015 Quals stuff 2015-03-15 21:20:11 +01:00
xorkey Add CodeGate 2015 Quals stuff 2015-03-15 21:20:11 +01:00

CodeGate Quals 2015 Onion and Mushroom Pizza

Run sploit_server.py somewhere publically and sploit.py anywhere. There were some extra steps to get the encryption key, basically send over the encrypted binary to our server, recover RC4 key bitstream, then send config and decrypt it.