Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

LabyREnth Capture the Flag (CTF): Unix Track Solutions

Summary: Unit 42 published solutions for the Unix track of its LabyREnth capture-the-flag challenge, covering six challenges built by Richard Wartell, Anthony Kasza, Tyler Halfpop and karttoon. The challenges involved decoding nested base64 blocks in a Perl script, spoofing a server date to 1999 to defeat a Rust binary's HTTP date check, and extracting a key from a Mach-O binary via IDA and a Swift demangler.

What you should know: The write-ups show how much can be recovered from binaries that ship unstripped: symbols, function names and strings were enough to locate the key checks in the client and server challenges, and a single date check was the only thing standing between the analyst and the flag.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related