general

[neon matrix]

do you release the solves after the competition

[tawny wigeon]

up to the challenge author

[outer jungle]

is there an issue doing these on mac lol

[tawny wigeon]

which one

[outer jungle]

the challenges in general

not those netcat ones

[tawny wigeon]

no

you can make a linux vm

if you want to

[loud vessel]

mac is the superior os so of course there would be no problems

[tawny wigeon]

^

[outer jungle]

😮

[stiff prism]

No

Macos sucks

[thorn dome]

run a mac VM on windows

[stiff prism]

Hmm

[gentle island]

rpisec op

[vale hamlet]

I am so jelly at the first places lmao

[ocean thicket]

@vale hamlet jjelly

did you say jelly

!say pp poopoo

!coinflip pp poopoo

[normal valve]

No, you should probably not pp poopoo.

[ocean thicket]

dang it

[vale hamlet]

lol yeah

[ocean thicket]

!coinflip @vale hamlet be jelly

[normal valve]

Yes, you should absolutely @​Epifor#9116 be jelly.

[vale hamlet]

lol

[ocean thicket]

!coinflip pp,poopo

[normal valve]

Yes, you should absolutely pp,poopo.

[ocean thicket]

hm

[thorn dome]

I thought PFS stood for planetary file system

[manic dune]

pwning for soju

[neon matrix]

sice-sice baby

https://tenor.com/view/cute-dog-wink-gif-12510229

[stiff prism]

😉

[covert berry]

Almost the end of day1 and I still have only 1 point... Never felt that bad...

[spring cloud]

Corrupted Pwnies

i heard you get jurisdiction over #misc now

[thorn dome]

Try the baby challenges, like sice sice baby

[boreal sierra]

ah yes, sice sice baby, perfect for beginners 🙂

[arctic gyro]

try babier csp

dm me if u want a hint or some feedback on what steps you're trying

[covert berry]

I spent hours trying all the xss payload I could think of. I think I need a break to come to it with a fresher mind

[arctic gyro]

try seeing what nonces do

specificaly for csp

[covert berry]

Thanks I'll look at it after the break

[ocean thicket]

don't be so hard on yourself mate

it's alright you can do this

live ctfs take time to do anyway

best of luck!

[chilly ravine]

@covert berry I'm in the same boat, first ctf btw. We got this!

[covert berry]

That's not the first one for me. But that's the first time I fail that hard :)

But I'm sure I'll find something before the end, and learn a lot reading the writeups

When you're at the bottom, you can only go up

[neon matrix]

I start to be so so curious about the dice is you thing hahaha

[ocean thicket]

that's the spirit champ.

[tidal vale]

idk how to troubleshoot ghidra 😦

[vale hamlet]

not unless a black hole opens on the opposite polar and you get sucked down through earths core :/

just sayin, it always can be worse

[ocean thicket]

!coinflip funny

[normal valve]

Yes, you should absolutely funny.

[ocean thicket]

!coinflip

[normal valve]

No, you should probably not <:lemonthink:805962564991057920>.

[sage musk]

!coinflip @everyone

[normal valve]

Yes, you should absolutely @​everyone.

[sage musk]

fair enough

is bargebot written in rust

[amber wind]

python

http://github.com/ginkoid/bargebot

[tidal vale]

doing babymix atm and im stuck lol

[ocean thicket]

youre late to the party champ

i tried everything

!fleg

what the fuck is this command

try it in #flag

[tidal vale]

i did lol

[ocean thicket]

did{gong}

[tidal vale]

can anyone give me a hint on babymix

[ocean thicket]

what the fuck is this

[tidal vale]

idk

btw at the end of the ctf where will i be able to read writeups

[thorn dome]

https://ctftime.org/event/1236/tasks/

challenge authors might post the intended solution on their blogs, too

[south rock]

Can someone publish a writeup for Missing Flavortext now ?

[warm gull]

no, that's strictly against the rules 😦

[shut rock]

babymix seems like a pain. im struggling too.

[tidal vale]

thank you

[south rock]

Ah damn it, didn't see that coming...

[tidal vale]

yeah i know ive been at it for a while now

[tidal vale]

i recommend using ghidra

for rev

[azure hull]

Would do ctf but too dumb :) and.... don’t wanna break my skull

[south rock]

breaking my skull is really relatable

[languid venture]

other challenges are going to be published? (which category if any?)

[uneven pendant]

#announcements message

there will be at least one challenge in every category except quantum

[tawny wigeon]

any additional challenges will be released in about 3 hours and 20 minutes

[languid venture]

thx

[tawny wigeon]

misc 👀

[uneven pendant]

o also misc

[tawny wigeon]

oh wait

[uneven pendant]

[tawny wigeon]

survey

[uneven pendant]

:^)

[amber wind]

hey guys

don't be like this

thank you

🙂

[uneven pendant]

also don't do this :^)

[amber wind]

wtf ethan don't leak the solution

now they'll know that

if you try a random amount of underscores

in a random amount of paths

with dots randomly strewn about

they'll get the flag

obviously

[lean chasm]

wtf does libc like dynamically update the copyright year when you run it or something

tf is this

[vapid beacon]

its 2021 though 🤔

[hollow jasper]

2.31 came out in 2020 I thought?

early

[lean chasm]

nvm i am stupid i forgot the the loader tries to load from library path

./libc.so.6 was correct

[subtle hawk]

i hope it works on remote now

🙏

[boreal sierra]

👀

[uneven pendant]

exp.cc 👀

[subtle hawk]

👀

timeout killing me

😭

how long is the timeout ?

@stiff prism

[neon matrix]

90 seconds

[subtle hawk]

i might have to setup a vps now

hmm okay

[uneven pendant]

reminder: don't be like this 🙂

you're causing our monitoring system to ping us for the traffic and it's getting kinda annoying

[tribal vale]

i get the feeling the ppl doing that aren't seeing your messages

[uneven pendant]

me too 🙂

[tawny wigeon]

ban

[sage musk]

cant you just ip ban them

or work out their username/team name from the ip, and give them a stern talking to?

[uneven pendant]

we haven't started 🔨ing yet but probably will if it continues

[oblique igloo]

are u guys ready for more challs?

[livid kiln]

Sure, we already completed like ... three!

[thorn dome]

now that sice sice baby has been blooded, get ready for sice sice adult

[stiff prism]

true

[rain violet]

0/10 no new challs 😡

time to CANCEL organisers

[amber wind]

TRUE

👀

[high current]

no more challenges allowed

it's past 24hrs

[boreal sierra]

DiceGang will not be held legally accountable

Our lawyers told us we will be fine

[loud vessel]

smh poor infrastructure

[manic dune]

⭐

[halcyon pollen]

[oblique igloo]

challs are up now 🙂

[modern marsh]

24hrs is halfway?

[stiff prism]

yep

[modern marsh]

sick

[maiden thorn]

Admins, I think my ip has been blocked, can someone help me?
I swear I will stop fuzzing! 🙂

[uneven pendant]

dm with ip

[gentle island]

lmao

[amber wind]

lmao

[manic dune]

lmao

[neon matrix]

oop

i love this emoji

[dusky rain]

fool, you broke the chain

[neon matrix]

hm?

[gentle island]

whoever solves adult csp first gets 100000000 pandaman ®️ pandapoints ™️

[neon matrix]

why is there no vc channels

LOL

[lean chasm]

did someone put one of those discord cache windows defender triggering things in here

[boreal sierra]

Rob should offer a 3d printed trophy for first blooder of adult csp

[neon matrix]

@lean chasm lol

[meager wadi]

very hard to moderate vc

[neon matrix]

@lean chasm it's a vbs reverse shell script hidden with stego

it's a discord rce

[arctic gyro]

i will give 4 cookies

to whoever solves adult csp first

[neon matrix]

il give 3

bananas

2 grapes

and 1 apple

( :

,s

BRUH WHAT DID HE SAY

[amber wind]

no one will know

🙃

[neon matrix]

,snipe

[boreal sierra]

o that means i owe pernicious 3 virtual cookies

[neon matrix]

B R O

-__-

[neon matrix]

not if i steal those cookies from u

better watch out i'm bringing the grandma that bakes those cookies

; p

[nova zenith]

will challenge authors be posting solutions/writeups when the ctf is over?

[amber wind]

up to authors

[loud vessel]

it's up to each author but probably

also competitors will probably post writeups

[nova zenith]

thanks

[amber wind]

also .

[amber wind]

.

[sage musk]

oi

why did i just get a defender notif when i clicked on this channelk

😠

[amber wind]

this is a hacking server

[sage musk]

:blobskid:

[amber wind]

if you are not ready for hacking we suggest you do the leave

[sage musk]

hacking more like "let's set off everyone's AV just to piss them off"

who was that

nice one

:thonk:

[dusky rain]

discord critical vuln 😱 😱 😱

[neon matrix]

@sage musk ik LMFAO that's the joke

[sage musk]

wao

[neon matrix]

[sage musk]

[neon matrix]

what do u think ab cpanel?

[uneven pendant]

zer0pts in first again 👀

[gentle island]

rust wasm :dab:

[manic dune]

removed the cat message

please don't post that again

[neon matrix]

xxddd

[scarlet stratus]

hi

[ocean thicket]

dang who pulled the skid move

if anyone wants an explanation of why that skid move worked,
https://twitter.com/0x0elliot/status/1347877064360136705?s=20

Elliot (@0x0elliot)

just found out that if put mildly malicious looking code to the tail of an image and send it over discord, it will get cached and make windows defender panic and give a false alarm and why is this so fucking cool?

Twitter · Jan 9, 2021, 12:05 PM

[sage musk]

yeah it's ok, it's not really skid even

it's just like

a bit annoying

¯_(ツ)_/¯

i mean, everything is really working as intended

[ocean thicket]

not if you have linux 🆒

[sage musk]

"i have linux, it's impossible for me to get a virus"

[ocean thicket]

but that's not a virus sir

[sage musk]

no

it's like vbs or smth

[ocean thicket]

that's just a vbs script appended to the tail of an image which doesn't execute at all

[sage musk]

yeah i know

[ocean thicket]

just triggers your windows defender. it's harmless.

[sage musk]

yeah i know mate

[ocean thicket]

yez

[ocean thicket]

🤡

[sage musk]

but i'm saying that it's good protocol in general to keep malicious code off your main computer

[ocean thicket]

indeed

[sage musk]

someone put a miner on my jupyter instance, but they were slightly more clever

they made a hidden dir in /tmp

and named the file "python"

[ocean thicket]

lol

do you have the sample? how did it happen?

[sage musk]

rather than just fucking downloading xmrig plonk right in the middle of the home dir

[ocean thicket]

i am not familiar with jupyter

[sage musk]

uhh i deleted it, but it'll come backl

very soon

[ocean thicket]

come back? lol

[sage musk]

yeah

scripts

scrape shodan

http://54.193.20.84:8888/tree?

ill delete your ip form the list, but this is what it looks like

[ocean thicket]

mhm

[sage musk]

some guy connected from an AWS instance, and the AWS instance also hosted his résumé

opsec 100

[ocean thicket]

lol why would you do that

[sage musk]

also i know most people are perfectly capable of absolutely destroying my measly AWS instance, even without perms

please do not do so

[sage musk]

bitcoinz

[ocean thicket]

i lack context because i haven't visited that link, but poggers on you champ

[gentle island]

https://ginkoid.is-inside.me/RhhP5rtt.png

[ocean thicket]

lmao

[gentle island]

@ whoever was asking for cookies

[ocean thicket]

thanks kind sir

[sage musk]

alright cya need to prep for gunnhacks, wish me luck setting up picoctf platform

[ocean thicket]

you hosting a CTF?

[sage musk]

uh

[ocean thicket]

why not just use CTFd? it's so much simpler?

[sage musk]

picoctf shell 🤤

[gentle island]

why not just use rCTF?

👀

[sage musk]

i kind of asked for this didn't i

[ocean thicket]

lol

wait so picoCTF gives players a shell too that you want to use in your CTFs right

that's so cool

[sage musk]

yeah

it is

uses SUID for pwn

and also has docker challenges built in

[ocean thicket]

those carnegie mellon nerds

[gentle island]

ok but you kinda need infinity money to run picoctf platform

[sage musk]

it's a like less than 24 hr ctf

[gentle island]

shell server mad expensive

[sage musk]

cpu rations

[arctic gyro]

historically shell servers on hs ctfs have

sucked

[gentle island]

wait

[arctic gyro]

because its always very laggy

[gentle island]

only one hs ctf has a shell server

[arctic gyro]

and forcing competitors to use the shell server

makes chall solving cancer

[sage musk]

we'll have netcat obviously as well

[ocean thicket]

https://media.discordapp.net/attachments/782874611997868072/807808666077626438/unknown.png

[uneven pendant]

and that one ctf has also had the shell server result in unintended cheese

[sage musk]

gunnhacks is a "mini ctf" aka it's for people who mainly

• don't really know a programming language
• don't have a lincox installation or vm
• will mald if they need to spend more than half an hour on a challenge

[uneven pendant]

also picoctf shell server resulted in massive cheese

in picoctf

[sage musk]

yes it did

[gentle island]

lol yea

[sage musk]

[ocean thicket]

that's pretty nice

[ocean thicket]

lmao

fr?

[uneven pendant]

yea uh

[sage musk]

yeah, all flags leeked

[ocean thicket]

that's so cool

[uneven pendant]

ppl are dumb

[sage musk]

needed to ALL be changed

[uneven pendant]

12h downtime

[sage musk]

:pepega:

[gentle island]

oh yeah all the flags got leeked

[uneven pendant]

:pepega:

[gentle island]

I thought you were referring to the mysql login

lol

[uneven pendant]

there is: lfi rce via /tmp in php

ppl sticking flags in /tmp

also the mysql one

tldr shell server = /tmp abuse

[arctic gyro]

12h downtime

[uneven pendant]

[arctic gyro]

team still maxes in 1.5 days

[uneven pendant]

ok rob

[gentle island]

wow I wonder which team that was

they must be really good

[sage musk]

people can't be trusted to run their own infrastructure

end of story

[arctic gyro]

tooting my own horn a little

[sage musk]

and "oh i'm writing my own ctf platform"

no

please

[gentle island]

can I toot ur horn

[sage musk]

ANYTHING

but that

[gentle island]

wait

[uneven pendant]

ok but compare dice infra to

csaw

[ocean thicket]

reminds me of that one time this one french CTF team clapped a CTF

[sage musk]

csaw is just ctfd

ctfd is boring, but reliable

until it isnt

[gentle island]

"ctfd is reliable"

[uneven pendant]

until ctfd dead

[sage musk]

rctf doesn't have individual accounts

[uneven pendant]

minute 2

[ocean thicket]

what are the bad things you guys noticed about it?

[uneven pendant]

uh

[sage musk]

people dont know how to host it

[uneven pendant]

hsctf ran ctfd on 16 core box

it still died

[arctic gyro]

wait isn't there a meme abt how

ctfd always dies

[uneven pendant]

dice is running on a 4 core box

and using 10% cpu

[ocean thicket]

lol

[arctic gyro]

in the first 5 min

[gentle island]

hm

[uneven pendant]

our rctf instance is massively underutilized

[gentle island]

I've actually used both ctfd and rctf for my club in the past

[uneven pendant]

google is telling us to downsize it :^)

[gentle island]

I would say they are pretty equal in configuration complexity

ig editing yaml isn't for everyone

[sage musk]

ractf, rarctf, ractf, picoctf, rgbpwnsecsexsketchctf, ctfd

ctfx

yaml

[gentle island]

I used to run our club's ctf platform on the school's shared hosting service

ctfd was actually unusably slow

[sage musk]

google forms 😤

[uneven pendant]

yea rctf is severely lacking in the admin ui department

we're working on it™️

[sage musk]

what about the team limit department

[gentle island]

hm

typically in ctfs we just share one account anyway

[uneven pendant]

we have the user members thing that you saw in redpwnctf

[sage musk]

yeah, but if a ctf organiser doesn't want that

[ocean thicket]

yeah i have noticed how CTFd is slow. but while testing it never died yet

[uneven pendant]

yea and this

[sage musk]

I guess the whole concept of team limit relies on honour system anyway

[uneven pendant]

https://cdn.discordapp.com/attachments/663099639779819531/802695954405785640/unknown.png

[sage musk]

which is fine

[gentle island]

when there's a ctfd the team is always

• redpwn
• BrownieInMotion

[ocean thicket]

lol

[sage musk]

why dont you just use your own account

is type a separate password to join the team

really that difficult

[uneven pendant]

less friction for ppl to hop onto the ctf

if you can just copy-paste creds from a channel

[sage musk]

there is already zero friction

you make an account

join the team

[uneven pendant]

instead of going through registration flow

[sage musk]

there doesnt need to be less friction

[gentle island]

[uneven pendant]

idt you understand how 50+ member ctf teams work

[ocean thicket]

ye rCTF has a nice link thing

it's pretty smooth

[sage musk]

google autofill is pretty neato as well

as we say in the buisness

[warm gull]

main issue w/ ctfd comes when hosting big events

[stone nacelle]

👀

[sage musk]

helo qpwoeirut

spotted

i should be prepping for gunnjhaclks

but i am here

[stone nacelle]

redpwn exposed!!!??!???!/1??!!11

[warm gull]

it's extremely difficult to make sure everything works with large number of requests

[stone nacelle]

mm

same

[ocean thicket]

yo admins

what the fuck is did{gong}

[sage musk]

redpwn more like kraftheinzberkshirehathawayconglomerate

[ocean thicket]

and !bean

!bean

[normal valve]

🔒 You do not have the required permissions to run this command

[gentle island]

https://dicega.ng/

wait

why does that redirect now

noooo

[heavy prawn]

rip

[stone nacelle]

bean is where you bean someone

[ocean thicket]

lol

[warm gull]

our legendary logo ;-;

[heavy prawn]

[gentle island]

did gong

did gong

[sage musk]

@stone nacelle qpwoeirut are you going to learn pwn for picoctf

[warm gull]

😮

[ocean thicket]

lol

[stone nacelle]

no im not

[sage musk]

then we dont need to harvest another pwn person

[stone nacelle]

[sage musk]

how is gunnhacks goiing

[stone nacelle]

wouldnt we need to

if i dont learn

[sage musk]

yeah

but if you dpo

[stone nacelle]

i will not

[sage musk]

sad!

man gunnhacks seems

[stone nacelle]

lemonthink sticker

[sage musk]

ok yea

now THATS epic

we probably shouldn't talk about this in this server

[stone nacelle]

lol

[sage musk]

as we don't want malding

[ocean thicket]

if i understood node.js

this ctf would have been 3x faster

[sage musk]

@stone nacelle did you already make a smol e

[stone nacelle]

smh this is a public server

[sage musk]

oh

sad!

[stone nacelle]

although anybody who would do dicectf is already too advanced

[sage musk]

presumably

[ocean thicket]

oh wait

lol

[uneven pendant]

tfw literally

[stone nacelle]

lmao

[sage musk]

unless we were to buy krusty burgers and disguise them as our own cooking 🤔

delightfully devilish

chop0

[uneven pendant]

tfw I thought this was a bug

[ocean thicket]

i am so confused

[uneven pendant]

then I looked at the axis scale

[stone nacelle]

i have no idea what that means but it sounds sus

2000 what

[ocean thicket]

i just saw something in watermark as a service

[uneven pendant]

requests

[stone nacelle]

[sage musk]

but replace krusty burgers with dicectf, and cooking with ctf challenges

[uneven pendant]

from one ip

[stone nacelle]

👀

[uneven pendant]

tldr don't bruteforce please our computers get unhappy and when our computers get unhappy we get unhappy

[ocean thicket]

no sir i saw something else

[uneven pendant]

mostly from the uh 100+GB of logs we've collected

[ocean thicket]

lol

[stone nacelle]

[sage musk]

default nginx log

[stone nacelle]

wait chop

are you like

[ocean thicket]

who is the admin for watermark as a service

[sage musk]

yeah

[stone nacelle]

actually attempting the ctf

or just

chilling on the server

[oblique igloo]

dm me

[uneven pendant]

dang sniped

[sage musk]

i did a challenge yesterday, but today have been working on ghunnhax

chalenges

fizzbuzz helo

[boreal sierra]

chop0 isn't helping his teammates smh

[ocean thicket]

i think it was intended but i was taken aback because of the striking familiarity with something

[sage musk]

ok actually gunnhacks can wait

back to reversing i go

[stone nacelle]

[boreal sierra]

gunnhacks is a hackathon?

:pepega:

[stone nacelle]

[sage musk]

yeah

bt with mini ctf

[boreal sierra]

those events sort of feel sometimes lmao

[sage musk]

yeah

[uneven pendant]

hmm at redpwn we were floating around the idea of writing some shell server software btw

with fully isolated user shells running in docker

[sage musk]

mm

[uneven pendant]

running on one big dedi box bc roaming home directories is hard

[gentle island]

ok but it'll probably be chroot in nsjail in docker in docker

knowing ginkoid

[uneven pendant]

lmao

nsjail is great for fresh sandbox per conn but

shell server needs persistent environments per user

:/

we could just run rob's pwn docker as the image btw

[gentle island]

no

rob uses python 2

[uneven pendant]

3 unsolved challs left 👀

someone pls solve adult csp or else rob will be sad

[gentle island]

yea rob spent a lot of time on this

so sad

gink too

[ocean thicket]

adult csp has no site huh

oh wait

there are files attached

[uneven pendant]

rob had wanted to put this in the web category btw

[gentle island]

"it has a website so it's web"

[arctic gyro]

too bad gink axed that idea

[gentle island]

good ginky

[uneven pendant]

gating adult csp behind babier csp smh

[gentle island]

tfw no challenge dependencies in rctf

[uneven pendant]

tbh that's probably something we should do eventually

along with a tag system

anyone down for copying justctf's scoreboard

[sage musk]

solution to sice sice baby is house of chaos

thank me later x

[ocean thicket]

why is there no functioning website dang it

[primal cradle]

admin for waas

[oblique igloo]

dm me

[uncut relic]

Have all challs been released?

[uneven pendant]

yes

we will be releasing a survey tho

all challs which affect ranking have been released already

[graceful minnow]

Is anyone solve dice is you

Any hint regarding dice is you?

[uneven pendant]

you have to solve level 5 properly to get the flag :^)

[ripe light]

That level is a nightmare 😄

[robust axle]

you could brute force it, but you'd have to try at least 3 different combinations of the symbols

for legal reasons I must say that I am joking and also have not solved it

[ripe light]

😄

[visual jolt]

Hi! Admin for babyrop?

[subtle hawk]

👀

[static juniper]

aadmin for watermark as a service? 🤔

[oblique igloo]

dm

[neon matrix]

Where do I go to learn how to complete these challenges as I have been unable to solve any . Of these I code Java and c

[crystal trail]

hello

[neon matrix]

Hello

[neon matrix]

Hello

[crystal trail]

where are you from ？

[tawny wigeon]

rip

no overnight bloods :(

[pine cipher]

will the challenges still be accessible after the end of the ctf?

[viral olive]

picoCTF or overthewire are good places to start i think

[spring cloud]

@amber wind UHC when

[amber wind]

never

[spring cloud]

nooo

i trained a whole year for this

[subtle hawk]

[wheat fern]

any admin for babymix?

[vague bramble]

mge me again 👀

[amber wind]

I uninstalled tf2 cause it's way too chonky

[vague bramble]

ok thats kinda chonky

[hollow jasper]

David get on today

we play

[amber wind]

josh's new pfp makes me very uncomfortable

[glossy marsh]

same

[hollow jasper]

YALL JUST JELLY

viv made it for a bucha ppl

[vague bramble]

wait i gotta finish my hw

🐒

[hollow jasper]

yes later today silly

[vague bramble]

https://tenor.com/view/tommy-innit-o7-gif-19653128

[amber wind]

ew csa

[vague bramble]

almost at 1k

[amber wind]

wtf

[hollow jasper]

noleek

[meager wadi]

caboose?

[vague bramble]

kunai lets you pull risky stabs

[amber wind]

TRUE

[hollow jasper]

gink i just sent a lot of ss

[amber wind]

also hi gink how are you

[vague bramble]

also it makes it way easier to surf explosives

[vague bramble]

but

[amber wind]

who needs nitro

when you can just upload new emotes

[glossy marsh]

[gentle island]

haskell moment

[primal elbow]

aplet

[meager wadi]

!clean until 808009973036089345

[normal valve]

✅ Deleted 7 messages!

[long grove]

[primal elbow]

gink omg what did i do wrong

[meager wadi]

dwai

[primal elbow]

im worrying

[glossy marsh]

[meager wadi]

!clean until 808012258713403402

[normal valve]

✅ Deleted 13 messages!

[glossy marsh]

censorship

[amber wind]

wtmooooooooo

[tawny wigeon]

pure gink

[amber wind]

we live in a society

[orchid sparrow]

🛏️ ⚔️

[neon matrix]

😰

the funniest thing is

wait no I'll say it in the pwn channel

[subtle hawk]

:c

[gentle island]

yooo mslc op

[rain violet]

@neon matrix prize for blood on survey?

[dusky rain]

you get free gink points

[rain violet]

is @harsh abyss 's love and respect still on the table

[dusky rain]

that's for him to decide

[neon matrix]

no prizes

[sage musk]

tbh actually

I love java so much

[subtle hawk]

👀

[neon matrix]

I did not have enough time to take part of the CTF but if someone post à writeup (after the end aswell) I am interested ( and Good Luck for THE
end of the CTF !)

[primal cradle]

admin for dice-is-you?

[uneven pendant]

@loud vessel

[neon matrix]

potential prize for first one to blood survey

[night bolt]

Reallly going for those in depth, well thought out survey responses there 😄

[unique sail]

survey speedrun

[night bolt]

tfw they wait 6 minutes after launch before announcing

rigged

[tawny wigeon]

don't worry, it doesn't affect tiebreaker or anything

the challenge exists purely so that more people see it

[south rock]

Where is my one point for the survey?

[warm gull]

😦 we released it a bit late

so we thought 1 point would be unfair to bad timezones

[south rock]

And btw, you forgot to include the rating for the sanity check challenge, which was excellent

[meager wadi]

intentional

too many ppl troll by selecting it

[uneven schooner]

In challenge rev/Guess the Vuln I am getting error: ./handler: 2: ./handler: Syntax error: newline unexpected (expecting ")") while opening http://localhost:31337/

[neon matrix]

Can some tell me how they solved the JavaScript ones please when the contest is over

[uneven schooner]

any idea, If I am doing something wrong?

[tawny wigeon]

dm @amber wind

and writeups will hopefully be posted after the competition

[uneven schooner]

just wanted to know if I am on right path?

[static juniper]

are you publishing official writeups after the ctf ends?

[tawny wigeon]

if you're referring to a specific challenge, dm the author about it

[tawny wigeon]

depends on the challenge. some authors will be publishing official writeup/solution

[amber wind]

you probably aren't running it properly

if you're getting a syntax error

[uneven schooner]

thanks got it working

[south rock]

will there be a writeup channel?

[neon matrix]

after ctf ends yes

[next tartan]

did anyone get dice is you

flag

[wary oriole]

look at the solves count

[south rock]

Can someone post a url for me into the writeup channel when the ctf is over?
I will be asleep by then

(someone who has completed babier csp preferably)

[unique sail]

you can just post it later there's no rush

[silk agate]

This CTF should be longer than 2 days

These challs are so good

[gentle island]

lmfao

[silk agate]

Wish I got a chance to look at more of them

[boreal sierra]

welp is adult csp gonna get solved

[uneven pendant]

you know if we extended the ctf by 24 hours that means we can release another batch of challenges

[pearl onyx]

i FINALLY completed babier

[glossy marsh]

pb are obviously hoarding it

[hollow jasper]

you can always do them afterwards as long as our infra people aren't mean 😄

[stiff prism]

our infra people are mean

wont let me make mac pwn

[manic dune]

ok xnu hacker

[gentle island]

no windows pwn either

literally gnu shills

[uneven pendant]

[sage musk]

gnu hurd pwn when

[uneven pendant]

we can leave challs up for as long as our gcp credit lasts

probably

[boreal sierra]

windows kernel when

[stiff prism]

ios kernel when

[unique sail]

just leave challs up until you have -200 balance in your account

[gentle island]

if we take down admin bots it can probably run for a long time

[sage musk]

[uneven pendant]

well admeme bot is on gcf so

pretty low cost this time around

[unique sail]

dont lemonthink me

[gentle island]

wait is it free

lmao

[unique sail]

this is absolutely not related to personal experiences

[uneven pendant]

idk I haven't seen cloud functions on our billing report

[gentle island]

how is ginkoid so op

orz

[sage musk]

i forgot to shut off the instances @unique sail

[uneven pendant]

ginkoid went from admeme bot at $30/day to ???/day

[sage musk]

honest mistake

[amber wind]

ginkoid gets kickbacks after shilling for google for so long

[sage musk]

and then i left the chat

[unique sail]

[sage musk]

rgbctf platform 😔 ✊

[glossy marsh]

vexctf platform

[sage musk]

pepeg

[unique sail]

[glossy marsh]

the commonwealth

[sage musk]

bad

[unique sail]

vexctf is gnu hurd except ctf platform

[sage musk]

:(

[glossy marsh]

[sage musk]

rgbctf platform is gnu hurd except ctf platform

[unique sail]

bruh literally no one is working on it

[sage musk]

@ pepsipu

[glossy marsh]

[sage musk]

[unique sail]

[glossy marsh]

[unique sail]

[sage musk]

now i just get dependabot requests

[glossy marsh]

[sage musk]

somehow bAse has adopted rgbctf2, which was probably a mistake, and he should probably remove it from his github

since its java EE

or something

somehow it was transferre

[glossy marsh]

rgbctf 2

[sage musk]

please dont make rgbctf 2

[boreal sierra]

is this

[sage musk]

@unique sail

[boreal sierra]

the reunion of

rgbsec

[unique sail]

what reunion

[boreal sierra]

chop0 and you

[unique sail]

what

[sage musk]

what

[glossy marsh]

whyyyyy

[unique sail]

no ive stayed in contact with chop this whole time

[glossy marsh]

i want free mice for guessing

[unique sail]

[sage musk]

insanity check

best challenge

from an organizer standpoint, was epic

[glossy marsh]

[sage musk]

most epic malding

[unique sail]

if rgb2 then i'll have to do infra so aaza

[glossy marsh]

[sage musk]

was worth the two 1 votes on ctftime given by penguin

[glossy marsh]

lmao

[unique sail]

[glossy marsh]

[sage musk]

we needed more misc

and stego

ngl

[glossy marsh]

[sage musk]

redpwn writeup for one of the challs:
"SSTV."

[unique sail]

are we allowed to say this now

redpwn exuded the most mald energy in the writeups

[sage musk]

yeah

it was great

[unique sail]

water under the bridge

[arctic gyro]

we did writeups for rgbctf?

[uneven pendant]

^

o wait

[gentle island]

yeah you guys required writeups for every challenge

what did you expect

[uneven pendant]

I remember writing up jisho

[sage musk]

hahahahahahaha

[uneven pendant]

[glossy marsh]

[sage musk]

thinking abt it

[gentle island]

who can find the hackmd

[sage musk]

i would make rgbctf2

[glossy marsh]

please fuck off

[sage musk]

it was so funny

[glossy marsh]

no

[sage musk]

yes

[meager wadi]

admeme bot is entirely free

[glossy marsh]

please dont

[sage musk]

epic clusterfuck

ok it could have been worse

[glossy marsh]

please no

[sage musk]

but it was pretty epic

[glossy marsh]

next time you are gonna hide the flag in an emote you add halfway during the ctf

[sage musk]

we're going to hide the flag on my desktop

[amber wind]

why do you think I added

[gentle island]

https://ginkoid.is-inside.me/MxWx0Oag.png

[unique sail]

you found it

[hollow jasper]

rob doesn't know because i wrote up soda lol

[gentle island]

wait aplet can you make this owner write only

pepega

[hollow jasper]

thonk

[unique sail]

Using the not-great documentation of the nearly-featureless LaserLang langauge
I was hurt by this :sadtownloaf:

[amber wind]

tfw

[unique sail]

#This is the end goal of the operations. This was not actually included in the shared object with the encryption function.
#There is no knowing what these numbers actually meant, but we assumed it was the desired output if we were able
#to input the flag into the provided program. However, we could not even do that, as no executable was provided.

[arctic gyro]

idt i wrote up any challs

i don't remember solving any challs

from that ctf

[amber wind]

ok it's owner write only now

[arctic gyro]

except maybe pepsipus

[amber wind]

didn't rob do soda pop bop

[unique sail]

you were having way too much fun with these for them to just be "for completion only"

[arctic gyro]

dunno i didn't rly feel like doing guess

[fair gorge]

almost as bad as the recent shadowctf

[amber wind]

https://hackmd.io/K9VxW3hVTZW7IBOlcjQGcA#Misc---another-witty-algo-challenge-name ah yes my rust algo

[glossy marsh]

[amber wind]

also smh if you're gonna have algo at least make it not "haha copy/paste dijkstra/floodfill go brrr"

[hollow jasper]

i didn't kno how to do house of force so

robby did 💔

[gentle island]

the worst part about rgb was that I never got the jam

[glossy marsh]

imagine doing algo

[hollow jasper]

i did it afterwards

i proposed the cheese solution tho

since i had just finished studysim

and it was similar

[sage musk]

i cant believe we delivered some prizes

we were so close

to full bad ctf bingo

:(

[glossy marsh]

[south rock]

[glossy marsh]

what squares were you missing

[sage musk]

blind pwn

because

[south rock]

Why is the admin bot so expensive?

[sage musk]

you cant have blind pwn if you dont have pwn

[glossy marsh]

[unique sail]

aaa i was so against these algo challs but at that point it was already such a fucking mess i just gave up

[glossy marsh]

good plan

[thorn dome]

fill it out

[sage musk]

twitter drama after ctf

sampriti malding

we didnt ban over criticism

smh

[south rock]

This is amazing 😆

[unique sail]

i think we tick every box

like literally every box

[glossy marsh]

[south rock]

we definetily get those 5 bonus points XD

[sage musk]

fake flags :pepega:

[unique sail]

anyway let me in the winrars when sadtownloaf

[glossy marsh]

we let chop in

[unique sail]

you did

[sage musk]

infra did not get hacked, but people decided to ddos it >:( and it was like 3 AM

[glossy marsh]

so we might think about it

🤔

[unique sail]

🤔

[sage musk]

so i just threw more instances behind the load balancer

[south rock]

willwam845 should be admin next year

[unique sail]

:blobreach:

[glossy marsh]

nah im good

[sage musk]

and then i accidentally deleted the main instance for ctfx bc i didnt label it

but then

digitalocean

was retardd

[glossy marsh]

stay tuned in 40 days™️

[sage musk]

and didnt delete backups

so

[meager wadi]

alternatively ip ban ppl 🙃

[unique sail]

bro that was the worst afternoon of my life

[sage musk]

was 3 AM, someone was using some booter and i honestly couldn't be bothered

[uneven pendant]

imagine not having

[unique sail]

no one else knew how to use DO

[sage musk]

i was so fucking tired, and EVERY NIGHT

[meager wadi]

lol the blur

[sage musk]

there was some problem

with the bloody infrastructure

[unique sail]

so everyone was just like "fix this you have been talking to chop"

and im like

[manic dune]

is this rgbctf?

[sage musk]

yeah

[glossy marsh]

[manic dune]

@unique sail nice song

osu player?

[unique sail]

lmfao

onigiri freeway does give it away doesn't it

[manic dune]

yeah

[unique sail]

yea hi

[sage musk]

did you include my "alright cunts lets go"

in the song

in the end

or just the ai-generated inspirational quote

[unique sail]

no i did not put that lmao

[glossy marsh]

oh the

that

[unique sail]

you know

[glossy marsh]

LMAO

hahahhaahha

[unique sail]

the end end end product of that

was

https://www.youtube.com/watch?v=omeqzUFUzls

i'm going to call this the one good thing that came out of rgbctf

[glossy marsh]

[south rock]

Dice CTF more like nice CTF

[gentle island]

yoooooooo

pb orz

[glossy marsh]

called it

[manic dune]

perfectly guessed

[uneven pendant]

all challenges solved 🎉

[vapid beacon]

op

[glossy marsh]

literally called it

[uneven pendant]

pb literally hoarding

[gentle island]

pee bee

[uneven pendant]

now rob doesn't need to be sad :)

[gentle island]

now we finally know everything is solvable

[stiff prism]

lmao

[unique sail]

problem can be solved and not solvable

[glossy marsh]

yeah they just guessed the flag 🙄

[stiff prism]

truee

[manic dune]

dice{gang}

[harsh abyss]

no leek plox

[arctic gyro]

congratz pb

little bit op

[harsh abyss]

so how is everyone doing?

[unique sail]

tired

[lapis matrix]

wondering about starting to learn pwn

so not that good

[glossy marsh]

do not

turn to the pwn side

you will have to deal with poortho and his notorious glibc pwns

[manic dune]

^

[lapis matrix]

that sounds scary

[spring cloud]

stay at the misc side

[manic dune]

poortho put me out of a job 😄

[spring cloud]

Solve pyjails and guess flags

[manic dune]

stick to kmh and his pyjails

[lapis matrix]

yeah maybe crypto in not that bad in the end

[spring cloud]

Would it be possible to train an AI to guess flags

Give it a flag and a challenge name

And an author

[stiff prism]

false

[lapis matrix]

create an AI that tries all iacr paper links

[manic dune]

create an AI that uses GPT-3 to write its own IACR paper

backdoor the next amazing crypto challenge™️

[spring cloud]

Maybe this would be useful for crypto

Given a paper, write code that does what is spoken about in the paper

[lapis matrix]

yours sound better

[dusky rain]

crypto papers without implementation should be banned

[harsh abyss]

@amber wind does escortum do a good job of screenshots

[amber wind]

idk I never used it

[harsh abyss]

hm i want a screen recorder with no ui

[gentle island]

obs!

[unique sail]

terminal recorder

[uneven pendant]

asciinema?

[harsh abyss]

i want maim but for recordings

draw a box / click a region to start

keybind to stop

[unique sail]

quicktime player can do that

[sage musk]

blinkenlights

[scarlet crane]

quicktime player is bloated though

[uneven pendant]

wtmoo

how do I unsee this

[glossy marsh]

wtf

[gentle island]

wtf

[meager wadi]

no nsfw pls

[scarlet crane]

LMAO

thincc is my favorite emote

[amber wind]

wtf

[glossy marsh]

what is this

@harsh abyss did you draw this

[gentle island]

https://ginkoid.is-inside.me/g2qWMXJt.png

exciting

[glossy marsh]

i cant wait to find out how to solve survey

[unique sail]

Same

[normal valve]

Reminder delivery:
To: @glossy marsh
Scheduled: Thu Feb 4 23:47:21 2021 (3 days ago)
Jump Link: #general message
Reminder:```
complain about dicectf on ctftime

[gentle island]

wtmoo