reality
2024-08-08 20:37:52 # UMD-CTF-2024

The mystery of life isn’t a problem to solve, but a reality to experience.

{{ nc }}


Background

UMDCTF challenge, very hard in theory, only 9 people solved in the end. But… there was a :cheese:

Triage

(Rank_strings broke as of python3.12 being brought to arch). It’s coded in C, no packer, seems to read a bunch of floats in order to help you get the flag, requires you to connect to a server and enter your solution in order to get the flag.

RANDOM BULLSHIT GO!

When you interact with the program, it keeps taking in input via stdin, so, I thought, what if I press CTRL-D? Well, this:
image

But how do we use this on a server?

Well… you can’t. EOF, in this situation, can only be activated via a closed socket, and if we close the socket, we won’t be sent the flag :/
But, if you look at ltrace, you’ll see what happens when you send EOF:
image
It’s just receiving a bunch of \n…

The solve

image

UMDCTF{welcome to reality... where we literally operate on the Real line real and true}