rev

[royal tiger]

dice is you level 4 : done with a little bit of thinking
dice is you level 5:

[tender flint]

lmao

what happened to the teletubbies

[snow bobcat]

Looks like they formed a black metal band

[void lion]

the teletubbies have had enough of kmh's tyranny

[midnight wharf]

why the first four levels is kinda the same but the last one isn't and it doesn't give a hint on how to?? of dice is you. like what?????????????????

[maiden quartz]

oh we were gonna have all 5 levels be a direct copy but were worried about copyright infringement

[snow bobcat]

maybe it is as easy as the other 4 but we are all dumb 🤔

[woven cargo]

the 5th one is the actual challenge i think

the rest are just warmup

[midnight wharf]

it does seem like something is missing when i look at it

[gray vigil]

I thought 5 was the easy one

[woven cargo]

(disclaimer: i know basically nothing about the challenge)

[oblique zephyr]

it would be hard to call it a "reversing" challenge if it didn't make you reverse engineer the game

[midnight wharf]

still doesn't make sense but ok

[woven cargo]

👀

lost in your eyes blooded

[dapper sierra]

finally solved it, was a pain in the ass 😅

[oblique zephyr]

to be more clear, it's not possible to solve without understanding the game code

[sly quartz]

:oooooo lost in your eyes solve

[true finch]

🆗🍎🍵

[midnight wharf]

so where is the noob stuff at cuz i know this cant be it. lol

[mild girder]

rip i spent a few hours on lost in your eyes yesterday

[oblique zephyr]

babymix should be easiest

procedural should also be easier although no solves yet 😠

[woven cargo]

lol

[midnight wharf]

am i missing some software to open that file??

@oblique zephyr am i missing some software to open that file??

[oblique zephyr]

it's mentioned in the description

[small cape]

Hello, can I pm an <@&805956149504770088> about Dice is you? 😄

[tender flint]

that'd be harry

[sly quartz]

@oblique zephyr also don't ping all organizers for a specific challenge

[small cape]

Yup, sorry 😅

[manic heron]

admin for guess_the_vuln ?

[stark atlas]

@sly quartz

[sly quartz]

dm me

@manic heron

[hard storm]

tfw you beat dice is you but no flag 😢

[stark atlas]

.

[hard storm]

yeah it was a cheese solve...

[tardy yoke]

Do you need to 'break' dice for level 5 solve?

[oblique zephyr]

no, it's possible to break it and "win" but you wont get the flag that way

[tardy yoke]

That explains the 'win' but not actually win... Thanks

[plain scroll]

😅 I won but do't get flag. Any hints?

[oblique zephyr]

figure out how the game works

[maiden quartz]

can't believe you expect me to reverse for a re challenge 😠

[olive pumice]

The first 4 levels kinda made me forget it's a re challenge 😛

[stray coyote]

I think I got a flag for babymix but the website won't accept it

but the program says it's correct

[fair urchin]

same

[oak wedge]

did you wrap it with dice{} ?

[stray coyote]

yup

[tender bay]

pm me

[teal horizon]

can I ask something about dice-is-you?

[oblique zephyr]

pm me

[teal horizon]

ok

[frosty wind]

Can I ask something about dice is you too

[oblique zephyr]

pm me

[azure moth]

Did you use any kind of script to generate that material or did you do it all by hand 😬

[oblique zephyr]

for procedural?

[azure moth]

Yeah, just curious as its crazy complex

[oblique zephyr]

by hand 😎

I hope someone solves it soon

[spring moth]

@sly quartz can I ask something about guess the vuln

[stark atlas]

just dm

[spring moth]

gotit

[zinc swallow]

the write ups will be published on this server ?

[dull locust]

admin for babymix

<@&805956149504770088>

[toxic locust]

dm me

[true finch]

please don't ping all the organizers

[blazing bear]

@oblique zephyr for dice-is-you

[outer coyote]

Hey @oblique zephyr is offline can anyone else give me a hint for level 4?

[sly quartz]

wtmoo

just think harder

level 4 isn't even rev

[outer coyote]

Thanks, I guess?😂

[outer coyote]

Yeah Idek what rev means. Im just winging it.

[static basin]

Can I get an admin to check babymix for me

[sly quartz]

he's asleep so dm me

[rose ravine]

Just got a quick question for dice is you, what does "sice" mean?

[sly quartz]

sice is what you do to deets

[rose ravine]

huh?

[broken onyx]

My procedural solver stack overflows

[sly quartz]

o cool how much rep does it have

[simple hedge]

babymix hurts me

[broken onyx]

[oblique zephyr]

"sice" is east-coast US slang, in this case it means "win"

[rose ravine]

Thanks! I kinda thought it meant something like that.

[woven sapphire]

sice is slang?

Dang

[oblique zephyr]

idk if it's slang but it's definitely regional language, I'm from chicago and I had never heard it before meeting east-coast people

[woven cargo]

its nova slang

[oblique zephyr]

try using a bigger stack ;p

[plush geyser]

I finished Dice is you and didn't get the flag, I'm very disappointed 😢

[sly quartz]

.

[pale dirge]

dice is you hurts my brain

[fringe dragon]

It’s so buggy

[sly quartz]

intentional bugs to increase the difficulty of reverse engineering

[oblique zephyr]

yeah, the undo bug was an accident and I was planning to turn it into a separate pwn challenge but ran out of time

[stark atlas]

smh harry literally leeking

[digital zephyr]

sice is not east coast slang it's poortho slang

[sly quartz]

TRUE

sice me deets

[warm widget]

unclear answers

[woven sapphire]

what is deets 🤔

[tawny edge]

deets are things that are siced

[novel lynx]

what happens when you sice the deets

[tawny edge]

deets are siced

[broken onyx]

^^

[toxic locust]

how does one obtain deets

[woven sapphire]

ok

so what is sice?

[quick sparrow]

what you do to deets

[woven sapphire]

🤔

[toxic locust]

can you only sice deets

or can you sice other things

[spring dragon]

who is mr. deet sicer

[true finch]

I am not sure if you can sice other things

but I know you can do other things to deets

[woven sapphire]

o sice is actual slang

poortho wasn't lying

i just checked urban dictionary

[tawny edge]

maybe poortho added the urban dictionary entry

[woven sapphire]

deets is also actual slang

or yea, poortho just added them

[woven cargo]

No sice is from th

Tj

I just siced it

[sly quartz]

what isn't from tj

#1 high school

[true finch]

wtmoo

[keen ember]

"commonly used in the DC MD & VA area (DMV)"

[sly quartz]

omg the DMV

pennsylvanians not welcome

😠

[tame fractal]

@sly quartz you don't like pennsylvania?

it's got the appalachians, snow, probably otherthings

[quick sparrow]

construction too

[tame fractal]

yeah idk only been once

but I wouldn't mind living up there

[oblique zephyr]

(lambda _:_(_))((lambda _,__='': _(_,__+'why no lambda solve >:(\n')))

[austere plaza]

I just figured out how lost 👀 work

I HATE YOU SO MUCH @sly quartz

[woven cargo]

Lol

[austere plaza]

😡

[stark atlas]

lmao

[keen ember]

lmao

[warm widget]

working on it!

[oblique zephyr]

😉

[cloud merlin]

author of "rev/Guess the Vuln" is here ?

[stark atlas]

asleep

@sly quartz

[cloud merlin]

ok

I think there is uninteneded bug

[stark atlas]

hmm can you dm me anyways lol

[severe holly]

@oblique zephyr Does flag match format on lambda

[oblique zephyr]

yeah, flag is normal format, the program expects you to entire the entire flag including dice{ and }

[iron rapids]

at level 5 on game you need the become a check ?

[outer coyote]

How to open babymix file?

[north pendant]

./babymix on linux

[outer coyote]

It says permission denied

[untold pine]

then probably sudo ./babymix

[sly quartz]

no

chmod +x it

sudo doesn't even work here

[sly quartz]

😏

[untold pine]

youre right about that, thought trying to execute a nonexecutable would give another error

[ionic shore]

for Dice is you: What just is the goal of lvl 5? its like going from sort of maze in lvl 4 to a ... Math? Checkers? I have absolutely no IDEA what the goal is this time around

[sly quartz]

it's almost as if you have to reverse engineer the goal

[ionic shore]

That'll be above my skill level then. A shame. I was getting all kinds of weird stuff happening but nothing was working.
Probably a some bugs I found.

[untold pine]

Lol beating all the levels was pretty easy just because "z" is really buggy, but you sadly don't get the flag that way

[ionic shore]

Aye. I was thinking it had something to do with it, but that illusion was dispelled in lvl 4 already.

[untold pine]

?

You can bug your way through every level

[ionic shore]

"z" is bonkers

[untold pine]

even the main menu is breakable and you can escape the box

I first thought that was like the real objective

[ionic shore]

"you found the secret level"

🙂

[untold pine]

I think I know how to beat level 5 the intended way though

[ionic shore]

I don't have the slightest Idea. I mistook it for a puzzle i could somehow solve, but i don't have any real technical knowledge. reverse engineering is just something i can't do.

[austere plaza]

diceisyou when real levels released??? @oblique zephyr ?

if anything, im already admire how the game mechanics are implemented

[sly quartz]

thank inspiration you are tkoa

[random solar]

May I ask a question about the challenge procedural?

[sly quartz]

chall author is asleep rn but you can dm @oblique zephyr and he should answer when he wakes up

[random solar]

thank you 🙂

[true finch]

where is the noob stuff??

[midnight wharf]

there isnt any

i already looked

unless i just holy suck at it all

[obsidian sundial]

glad not to be alone then

[ionic shore]

There isn't any noob stuff, Even the misc 1 requiers a bit of searching 🙂

[broken onyx]

Lambda makes some very nice patterns if you add debug statements and zoom out

[midnight wharf]

so this ctf is a lie then it said noob stuff would be here lol wow. what a way for me to start this

[true finch]

there are a handful of easy challenges!

[keen ember]

there definitely is noob stuff

look at babier csp to start

[fervent matrix]

idk guys wheres my caesar cipher

[slim pagoda]

admim for re babymix, please?

[maiden quartz]

wheres my baby kernel heap pwn

[sly quartz]

dm @toxic locust

[midnight wharf]

show me these so called noob task

@true finch

[true finch]

the webs are pretty good for beginners, give those a go maybe

[maiden quartz]

sanity

[woven sapphire]

Babyrop

Babymix

Babier csp

[midnight wharf]

none of those has a how. so you already have to know how to start it

[keen ember]

yes. you have to figure out how to solve the challenge

but the baby challenges (especially babier csp) can be solved with a little bit of research

[tawny edge]

sanity check

[midnight wharf]

nevermind you dont get it because your not a noob

[olive pumice]

You can definitely solve babymix by googling a bit, even if you don't know much.

I am still a noob at reversing but I did it. You just have to look around, google for keywords etc.

[obsidian sundial]

We solved it even though we knew next to nothing on the vuln
Research did it all

[void lion]

babymix is a good noob challenge

[midnight wharf]

i already got the hint for that one but it requires something that i have to signup for just to access it. i dont sign up for things am only going to use once then delete it. now they have my email forever bugging me no sir

[olive pumice]

You don't need to sign up for anything to solve babymix

Except the CTF itself I guess

[sly quartz]

do you want to work through babier csp together 🙂

[iron rapids]

sure

[midnight wharf]

if am not tripping the fie is only one that can be read by something special right???

not trying to give it away if i can

[tender flint]

dm aplet and you guys can walk through

[void lion]

wonder how many dms from people who haven't solved he is going to get

[true finch]

does anyone want to walk through the forest together 🙂
it's a nice thing to do when feeling frustrated

[olive pumice]

There are multiple tools that work, some free some not free. Just google for the topic and related terms. Watch some videos, etc.

[tawny edge]

all of ctf is just guided googling tbh

[cloud merlin]

lol

[midnight wharf]

i still dont know what to look for??

[boreal mountain]

site:ctftime.org ftw

[midnight wharf]

quick question can these ctf be done on windows?? or do i need a special machine??

[tawny edge]

most problems can be done on windows

[midnight wharf]

is it better to use Linux off the jump or????

[tawny edge]

and for the problems that do require linux almost all of them can be done on wsl (windows subsystem for linux)

just use whatever operating system you're most comfortable with

[still valve]

I believe I have the correct flag for babymix, but it's telling me it's wrong

[toxic locust]

Dm

[zinc swallow]

Hi will the writeups be published here , thanks

[maiden quartz]

ctftime.org

[zinc marten]

@woven sapphire i have full rop chain in babyrop, but it works only locally, your server give me no response when i am calling dir

[stark atlas]

Got EOF while reading in interactive

you crashed

[true finch]

tfw sudo python

[woven sapphire]

josh is the admin, not me 😔

[sly quartz]

tfw #rev

[true finch]

joshdabosh is the author for babyrop, direct any questions to him

[iron rapids]

1. babyrop isnt a rev chall
2. fizzbuzz isnt the author

[sly quartz]

1. tux is a penguin
2. hi tux

[zinc marten]

@digital zephyr

[woven sapphire]

just put me in every challenge description next year

[sly quartz]

o right you're in the challenge description

[true finch]

consider asking your question in #pwn

[sly quartz]

josh literally throwing

[granite belfry]

ok fizzbuzz

[sly quartz]

dicectf 2021:

"just put me in every challenge description next year" - FizzBuzz101

[toxic locust]

it is 2021

[iron summit]

🤔 I just beat level 5 of dice is you but I didn't get a flag

[stark atlas]

.

[iron summit]

Ah, I see

[granite belfry]

ono

[untold surge]

hello, I am trying to solve re-babymix, I am sure its for noob but I am a noob too, so do you have a educational content that can help me to train myself

[toxic locust]

dm

[umbral imp]

Hey @sly quartz . We just finished lost_in_your_eyes and god damn, this is probably my favourite RE challenge ever. Good job designing that beast!

[sly quartz]

ty

[wraith pond]

agreed. sooo much fun compared to all the yet another statically linked c++/rust binary challs

[muted phoenix]

Re channel? What about the REEEEEEE channel?

[broken onyx]

got you covered

[dusty gale]

Hello, we have issues with rev\procedural, but admin is sleeping. Can i dm anyone?

[stark atlas]

I can try to help

[sly quartz]

I can fail to help

[oblique zephyr]

I'm awake, pm me

sorry, forgot to switch status

[oblique zephyr]

dm me if you have questions

[dusty gale]

our team member already talking with you, thanks

[oblique zephyr]

👍

[zinc marten]

When write ups will be available?

[true finch]

still 1 hour left!

[heavy drum]

Anyone can release writeups after the CTF ends; organizers may or may not do so as well

[zinc marten]

I am tired already

[zinc marten]

If they wont, then fuck them😋

[true finch]

wtmoo

[heavy drum]

wtf

[tender flint]

lmao

i agree

[zinc marten]

xD

[heavy drum]

Okay I'll start working on sanity check writeup 👍

[zinc marten]

Why would you make CTF and dont release write up if there is no any

[void lion]

hey thats my job

[quick sparrow]

for the challenge

one way to guarantee writeups is to make your own!

[stark atlas]

(re adult csp)

[keen ember]

hoy

[true finch]

https://ginkoid.is-inside.me/SbHzTh8y.png

is this leek

[keen ember]

yes

[true finch]

what if my screen is really wide

and it's actually super long

:hyperthonk:

[zinc marten]

I dont want to solve somebody's morbid fantasy tasks

[charred prawn]

what

[quick sparrow]

shame

[true finch]

what

[quick sparrow]

perhaps CTF is not for you then?

[heavy drum]

so true queen

[woven cargo]

uh

[charred prawn]

are you using a translator

i feel like something is being lost here

[tender flint]

so true

[true finch]

tbf aplet is a self-proclaimed masochist

[quick sparrow]

LMFAO

@heavy drum 🤔

[charred prawn]

🤔

[quick sparrow]

here just for u canvas

[zinc marten]

only for one sentence

[quick sparrow]

there's a flag hidden here: 5b0efa5dd715b0541b40c9fcbc6a5fc29a58c83ec4bfa01e2a326280a679d06c

if you solve i'll venmo you $20

[true finch]

inb4 /dev/urandom

[quick sparrow]

im on windows there's no urandom

[heavy drum]

nah it's /dev/random

[quick sparrow]

this is a fantasy chal because if you solve you will have surpassed the god of guess god

[stark atlas]

ok tark

[quick sparrow]

unless neptunia counts as guess god

[charred prawn]

not random bytes ™️

[true finch]

I'm on windows too

https://ginkoid.is-inside.me/OVhw7YZA.png 🙂

[charred prawn]

what is

that url

[void lion]

ginkoid.

is inside me

[true finch]

wat

I've been using this for every screenshot

how did nobody notice

[charred prawn]

i have not been here

[heavy drum]

willwam do you have a problem with that, huh?

[void lion]

no

[heavy drum]

quintec?

[void lion]

i dont

i think its kinda nifty

[heavy drum]

ok that's what i thought

[void lion]

[broken onyx]

epic

[charred prawn]

can ginkoid be inside me

[heavy drum]

wtmoo

[true finch]

ok I did this as a meme partly, but it is genuinely faster than imgur so I just never switched back

[broken onyx]

👉 👈

[heavy drum]

wait what it was ironic?!?

[broken onyx]

Why do people use their custom domains and not just snipping tool 🤔

[void lion]

^

[true finch]

I can share 100mb

[heavy drum]

sometimes the image is too big for discord

[true finch]

with link

^

[heavy drum]

my monitor kinda massive

[void lion]

chonk

[broken onyx]

Smh just deepfry it

[heavy drum]

also custom urls are fun https://brown.ee/15YLOeo7.png

[true finch]

also sometimes I want to share screen recordings

and those are way over 8mb

usually

[heavy drum]

o i should set that up

[charred prawn]

just streamable

[true finch]

yea I use sharex

it's nice to have everything in one place

🙂

[heavy drum]

rip sharex

[zinc marten]

Lol, take your $20 and give it to the orphans. If you're doing these kinds of tasks, I'm starting to question your adequacy

[true finch]

wtmoo

[heavy drum]

wtmoo

@somber ravine

[thorny oracle]

you're right. he's just doing it to hide his imposter syndrome.

👀

[quick sparrow]

true

[stark atlas]

ptom you didn't even write any challs smh

[quick sparrow]

stop, my imposter syndrom is kicking in

[gray vigil]

maybe i should get a sharex domain

[heavy drum]

hey no afk shaming!

[true finch]

I uh

offered moral support 🙂

[heavy drum]

me too

[quick sparrow]

i talked to people

because apparently no one else wanted to

cough @woven cargo

[stark atlas]

sounds about right

[heavy drum]

🦥

[solar elm]

lmao ginkoid is inside me

[woven cargo]

🙂

[thorny oracle]

sharex vs greenshot

should i switch

[sly quartz]

flameshot

[thorny oracle]

to sharex

[keen ember]

sharex good

[true finch]

sharex 🙏

[tame fractal]

flameshot is p good

[solar elm]

windows shift s 💀

[true finch]

can win shift s do screen recording????

[heavy drum]

maim 🙏

[true finch]

maim pepega

[heavy drum]

maim is the best

maim is like scrot but the name is less sus

[solar elm]

no which is the only reason i am considering using sharex

[digital zephyr]

YIKES LMAO

[sly quartz]

escrotum is like scrot but the name is more sus

[heavy drum]

wait escrotum does recordings hmmmmm

[sly quartz]

I wonder if you can repeatedly maim for screen recording

probably terrible for performance

[heavy drum]

no you can't

literally no way that works

[sly quartz]

wynaut

[true finch]

https://ginkoid.is-inside.me/eP0A71sP.mp4

sharex so good

[heavy drum]

wait that circle is so perfect

[sly quartz]

omg panda how did you draw that

[true finch]

idk

[heavy drum]

omg panda

[true finch]

guess I'm just a god

[sly quartz]

your hand must be so steady

[stark atlas]

#rev btw

[charred prawn]

wtmoo

[heavy drum]

you should use ur drawing table to click the ui

[charred prawn]

this is re

[heavy drum]

then put ur drawing tablet away

[charred prawn]

how to re that circle

[heavy drum]

then try to close xournal

[charred prawn]

how was it done

[true finch]

lol

I hate that bug so much

gtk :notlikemeowcry:

https://ginkoid.is-inside.me/tRTt9FGB.mp4

W

[somber ravine]

I use syncthing 👀

I have a $5 vps

that I use so sync and backup

[heavy drum]

omg

[sharp thistle]

What's the lambda flag? 😂

[hollow hull]

post writeups for any of them ty

[oblique zephyr]

dice{Al0nz0_Churc4}

[slow briar]

not dice{Ml0nz}

oh no

[oblique zephyr]

lol

[slow briar]

we were so close

[twin wharf]

https://cdn.discordapp.com/attachments/226177449531015169/807726085457313872/DeepinScreenshot_select-area_20210206133453.png
fun from lost in your eyes

[midnight igloo]

what was the "Guess the Vuln" challenge flag?

[brave marsh]

nice blender challenge

[broken onyx]

I really wanna see a writeup to procedural

[novel lynx]

n0w_m4ke_a_d0nut!! for blender

[broken onyx]

I had a z3 solver that sort of worked but it ran out of memory if i had all the iterations and layers on

[rough grove]

for procedural I pulled everything out to psuedocode

an then i generated every single valid path per the 7 things

[broken onyx]

Did you have to recognise some kind of algo?

[novel lynx]

dice{obviously_just_brainf_in_header_in_options} for guess

[hollow hull]

anyone got a writeup for the dice-is-you

[broken onyx]

Bruh just bruteforce it

[rough grove]

and then I tried each one in each of the flag checker outputs

[lilac olive]

I want one for Dice is you, I was so freaking close but couldn't figure out how to bruteforce quickly enough the 25 positions

[rough grove]

and I narrowed down the possible paths to those that didn't ovelrap + generated valid ascii

and that gave me about 40k possible flags, and then I just looked at them

[midnight igloo]

what was the intended solution? I used a simple timing side channel p = chr(ord('0') + i) + '{j}' , but it wasn't very reliable

[novel lynx]

I realized that ~{} checks if the value is 0 and times out if it does

so I created a table of how each letter could be 0, then brute force each one

[cyan delta]

hey, does anyone have a writeup for the babymix?

[novel lynx]

so 00000kkkkkkkkkkkk~{} times out because d is the first character, but 00000kkkkkkkkkkk~{} doesn't

[cloud merlin]

you could also extract knwon character

[novel lynx]

there's probably a better way

[brave marsh]

decompile in ghidra, solve it using z3

[novel lynx]

I just I knew what worked

[cloud merlin]

but at the end ... ~{} was the way

[cyan delta]

yeah I want to see the z3 part

[novel lynx]

the blender one was annoying because I kept getting results that were technically valid but not printable results

[cyan delta]

thanks!

[stark atlas]

did you guys appreciate these reroutes

I spent a good 5 minutes organizing these :3

[broken onyx]

Was the intended method to just brute the connections?

[soft bay]

import angr
import claripy

flag_len = 22

proj = angr.Project(
    'babymix', 
    main_opts = {'base_addr': 0x0}, 
    load_options = {'auto_load_libs': False}
)

flag = claripy.BVS('flag', 8 * flag_len)

state = proj.factory.entry_state(stdin = flag) 

for i in range(flag_len):
    state.solver.add(flag.get_byte(i) >= 33)
    state.solver.add(flag.get_byte(i) <= 126)

sm = proj.factory.simulation_manager(state)

sm.explore(find=lambda s: b'Correct' in s.posix.dumps(1))

print(sm.found[0].posix.dumps(0))
print(sm.found[0].posix.dumps(1))```
simple babymix solution using angr

[twin wharf]

yeah i solved it with angr too

[novel lynx]

I just solved it in z3

[broken onyx]

Can you send your solver? Mine runs out of memory

Yes you

[sharp thistle]

We got this dice{Ml0nzz_Cmurcs} almost the same 🙃

[novel lynx]

I can once I make it not super ugly

[broken onyx]

Is mine

If I reduced the iterations in Memes and turned off a couple of inner layers it seemed to finish

[north pendant]

oh nice, i didn't know about z3 :/ tried to write my own solver but it didn't work lol

[novel lynx]

I had problems with setting Meme1 to 667 so I had to run it on 640

[quick sparrow]

@deep fox you can chuck all the equations into an array and add that to z3

[oblique zephyr]

for procedural, each connection was doing x^a mod N then x^b mod N and it just so happened that there were perfect keypairs (a,b) that were valid RSA keypairs with a modulus of 667

as it turns out there were also ways to solve with mismatched keypairs, need to do more math testing next time ...

[frosty wind]

Is there a dice is you writeup?

[stark atlas]

lol looking at lost in your 👀 writeups I'm kinda sad I didn't get to do this chall

[austere plaza]

source code for dice is you when @oblique zephyr

[sly quartz]

I liked making it

btw my tooling for lost in your eyes was

google sheets

pepega

[stark atlas]

thonk

[oblique zephyr]

I'll release later today probably ;p

[austere plaza]

sice

[twin wharf]

the challenge reminded me of befunge a lot

[sly quartz]

here is some of the bound checking

o hm it does kinda look like befunge

guess I'm an esolang writer now

[austere plaza]

did you actually not have befunge in mind when you wrote this lmao?

[sly quartz]

no

but also there are only so many ways you can make a 2d vm

[stark atlas]

inb4 hbcht vm

[true finch]

4d vm coming soon

[sly quartz]

also here's some unholy code from my input

[austere plaza]

well its diff than befunge in that you like registers more than stacks

[true finch]

4d is twice the d of 2d

clearly

[twin wharf]

i copied a befunge interpreter i wrote a few years ago as a basis

[deep fox]

Was it possible to solve dice is you without modifications to the game? I couldn't pass all the checks in "_flag_rules"

[twin wharf]

we actually had 2 interpreters since not_really wrote his own tooling too lol

[sly quartz]

for some reason the maze solving code is harder than the actual maze program

[austere plaza]

yes

[stark atlas]

you had to solve it that way for it to give you the correct flag

[deep fox]

How did you get all the ">>" lighten up

[austere plaza]

what was your solver?

[true finch]

someone post the video

[sly quartz]

basically my sol involved just sticking the coordinates in the input section since the valid opcodes (due to being in an enum) are actually quite small

which means

the coordinates are valid opcodes

[austere plaza]

lmao

why didn't yo ujust

stick the entire grid into code

[sly quartz]

hm true I could've

[austere plaza]

like a very obvious ploy

[true finch]

now that's a juicer

[sly quartz]

but this is also pretty fun

[austere plaza]

you even made it like super easy

to do that

[sly quartz]

yeah I gave a lot of space

to be nice

I didn't want to have

esoteric 2d vm golf

[twin wharf]

yeah we just copied the grid and read from it

[austere plaza]

r4-r5 even was the registers that pointed to the top left of the grid

[twin wharf]

can see in that image i posted earlier

[sly quartz]

mby I should've had esoteric 2d vm golf

[deep fox]

Ok, not enough code "research" from my side D:

[austere plaza]

yeah basically did same here

[twin wharf]

[sly quartz]

I did this to make it easier to read the coordinates

[austere plaza]

LMAO

[deep fox]

but eh, dice is you code was pretty readable after transformations

[oblique zephyr]

is that ghidra?

ghidra can wasm now?

[novel lynx]

yeah I was gonna say

[austere plaza]

no thats

[sly quartz]

I had a lot of empty space leftover

like a lot

[austere plaza]

wasm2c

[novel lynx]

the only wasm plugin I know is outdated

[austere plaza]

or something liek that

yeah that plugin is broken also

[novel lynx]

oh, wasm2c actually works?

[austere plaza]

well you get code like that above

[deep fox]

wasm2c then compiled without linking and decompiled with ghidra (to reduce garbage and repetitions)

[oblique zephyr]

it probably works better in this case because dice is you was written in C ;p

[austere plaza]

make sure to do it with -O3 or -Os

[true finch]

rust wasm 👀

[solid iron]

what is this

[novel lynx]

I did diceisyou with only wasm2wat and wasm-decompile

[austere plaza]

also thanks @oblique zephyr for not stripping

[sly quartz]

that sounds weird but okay

[austere plaza]

:thonk:

[oblique zephyr]

lol

[spring umbra]

weird that lambda was solved less than e.g. liye

[oblique zephyr]

yeah imo lambda and procedural were both easier than dice is you

[austere plaza]

here's my version of that code

[sly quartz]

tfw some people thought that lost in your eyes was a 256*256 long linear vm

and that certain instructions just made you jump 256 opcodes

[novel lynx]

next time do a 3d vm

[sly quartz]

TRUE

[austere plaza]

lmao

hey

[sly quartz]

tooling for a 3d vm would be

painful

[austere plaza]

there was that ctf a while back

[stark atlas]

use blender :^)

[novel lynx]

code it in blender python

[twin wharf]

hardest part was getting trolled by disassembler offsets

[sly quartz]

maybe when I get my holograph projector in the mail I'll make a 3d vm

[novel lynx]

yes

[austere plaza]

where it looked like that

some ctf that converted each cell of some befunge like code and jitt'd it into assembly

[sly quartz]

originally my conditional jump did not check for direction modifiers in the opposite direction

so stuff like ?<. was allowed

but then I'm like

what if some guy

finds a way to jump the wall

and that somehow prints a smiley face

so then I decided to add the check

[austere plaza]

lmao that's what I was thinking lmao

[sly quartz]

it's probably not possible but I don't wanna risk it

[twin wharf]

yeah i would have tried to jumped the wall lol

i thought about it

[sly quartz]

I wrapped the smiley face printing in exits as well

so maybe I should've gotten rid of the check

because honestly

finding a way to jump the wall

with a smiley face printing mechanism wrapped in exits

you kinda deserve the flag

yugge calling it the "death box"

I approve of this name

[austere plaza]

i call it

the sandbox

[daring spade]

my emulator 🙂 (green is PC, red is memory that was written)

[sly quartz]

this sol is closer to what I had

[daring spade]

I even had stepping, continuing and breakpoints implemented 🙂

[sly quartz]

store the coordinates in an array then loop through and find it

[daring spade]

wow, that's quite complex

I was too lazy and just did a plain lookup

[sly quartz]

yeah my code got a bit complicated

overall this challenge was really fun to write

[austere plaza]

wow a lot of the symbols you chose to represent the opcodes kinda matches mines pretty closely, except for a few of the more esoteric ones

[daring spade]

tbh dice is you was simple if you just plugged firefox's debugger and added a BP on _check (or something similar) and then blackboxed everything

[daring spade]

yes, I noticed 😄

especially the capital letters

[novel lynx]

how are you debugging wasm in firefox

[daring spade]

F12

[tawny edge]

6d vm when

[sly quartz]

dang you guys went for the single letters

way to actively harm readability

[daring spade]

you can add breakpoints, watch variables etc, and in this challenge you had symbols (i.e. function names)

[stark atlas]

ok mr semicolon man

[novel lynx]

is this something new? I still don't see an option to do that

[oblique zephyr]

wasm tooling is getting too good ;p need to write harder challs

[daring spade]

nah, it's pretty old AFAIR

[sly quartz]

sourcelessrustwasmrev

[austere plaza]

it was simple cause then my disassembler/assembler was just a few lines long

[sly quartz]

ono

[daring spade]

maybe you just can't find it ;P

[novel lynx]

this is at most what I see

[spring moth]

Anyone tried using ghidra for decompiling wasm?

I couldn’t get it working

[sly quartz]

.

[austere plaza]

i really wanted to write a plugin to decompile wasm but sadly no time 😦

[spring moth]

Ah yes, I used wasm2c as well, with some tuning

[daring spade]

that the right place. just F5 while having the dev tools open

[spring moth]

saw ghidra_wasm repo but couldn’t find a guide to compile it 🤣

[austere plaza]

yeah no it's also broken

it doesn't compile

it breaks with loading wasm files

basically broken and useless piece of junk

[novel lynx]

🤔 why don't they just say that

[sly quartz]

you expect people to go like "my code is trash"

[novel lynx]

I just ran wasm-decompile and then threw the input into closure compiler to get rid of the useless variables

doesn't look too bad

[austere plaza]

last time I used wasm-decompile

[sly quartz]

tfw I put "don't fuzz the challenge" in guess the vuln's description and people still fuzz it

I guess the title is too tantalizing

[austere plaza]

i thought I still had to do a lot of fixing stuff

so i just did wasm2c -> gcc -> idapro

[sly quartz]

dang what are these esoteric wasm workflows

compiling to decompile

ig gcc optimization is nice

[austere plaza]

^^^

[novel lynx]

if it works it works

[austere plaza]

yeah ... the problem with wasm-decompile is it still generates A LOT of tmp vars

and it doesn't compile back into gcc to clean up some of that

[novel lynx]

hence closure...

[austere plaza]

yeah hmm maybe that might work

[sly quartz]

have you looked into https://github.com/facebook/prepack

[austere plaza]

problem is

i don't even know what the language that wasm-decomp generates that could parse and optimize this

[novel lynx]

just remove the type after the variable and it looks mostly like javascript

[austere plaza]

also if you ever read the wasm language specs

it reads almost like an academic paper

[sly quartz]

if you ever read the haskell language specs it reads exactly like an academic paper

[stark atlas]

if you ever read the risc-v specs it looks exactly like an academic paper

[oblique zephyr]

the wasm spec is actually super clear though

really nice spec imo

[austere plaza]

actually for riscv not so much

err not as much as wasm specs

[austere plaza]

yeah it is clear, because it's super duper specific

[deep fox]

Chrome can debug wasm with symbols too

[sly quartz]

dice is you but stripped

[oblique zephyr]

hmm sounds like "dice is two" for next year...

[sly quartz]

oNo

[stark atlas]

   di
   ce

di is you
ce
   
   two

https://cdn.discordapp.com/attachments/780905590313975808/807913710471217173/unknown.png

[true finch]

dice if you vm???

[sly quartz]

TRUE

people have made some scary things in baba is you

[tiny crystal]

brute force approach worked for the lines with partial info, but not after that ^^

is there a concise "this is what the rule is"?

like can you derive the rule just from observing relationships between the symbols? or do you have to RE it out

[novel lynx]

each symbol had a number representation. for each line, it put those numbers into a function and checked if it was equal to 0

42 * (a & 255) + 1337 * (b & 255) + (c & 255) + ((c & 255) ^ (d & 255)) + ((e & 255) << 1) & 255 == 0

[tiny crystal]

i see

there are many possible solutions for a set of 5 characters

how do you figure out which of those is the correct one (i.e. fits into the grid?)

[solid iron]

baba is you is turing complete

[hollow hull]

how do you figure out that part with RE

[novel lynx]

just gave the conditions to z3 and it figured it out

[sly quartz]

z3 op

literal magic

[tiny crystal]

hahaha cool

[novel lynx]

I solved all the rev challs I did with z3

[sly quartz]

which ones did you do

[hollow hull]

how did you figure out this part like RE wise

[novel lynx]

dice is you, guess the vuln, procedural, in your eyes

[tiny crystal]

my approach was wabt/wasm2c -> gcc an object file -> decompile

[novel lynx]

#rev message this is code function from wasm-decompile

again, not the best method but it works for me

[iron rapids]

anyone solved lost in your eyes?

[hollow hull]

i see thanks. how did you gcc it after wasm2c. I got a bunch of failed external symbols.

[stark atlas]

#writeups message

[tiny crystal]

https://klatz.co/ctf-blog/boilerctf-alien-tech

ctrl f gcc

it's pretty messy tho

kind of a pain to read

[deep fox]

gcc -c

[stoic nimbus]

Dang I tried that

[tiny crystal]

wasm-decompile looks interesting

gonna take a look, thanks [[nope]]

[novel lynx]

did you guys all just brute it, or did you guys use z3 too?

[soft dune]

Was babymix possible with angr

My solve script couldn't find a state that worked

[novel lynx]

#rev message

[tiny crystal]

i wrote code to brute but runtime was too long

• python to codegen wasm for map state
• refresh page in selenium, fake key presses
• take screenshot

[oblique zephyr]

Source for dice-is-you: https://github.com/hgarrereyn/dice-is-you

[hollow hull]

@soft dune z3 can offer multiple solutions

you had to print out all of them i think there was 2 and it was the 2nd one lol

[gusty zenith]

I set BitVec in z3 to 7bit to just get the ascii one

[errant ice]

I don't know how to analyze correctly in wasm file

I found flag_rules in c using wasm2c, but no xref.

so I can't find argv

[polar tulip]

What is the language implemented in lost in your eyes?

I thought it was something like befunge or piet, but they are both stack based...

[stark atlas]

it's a custom virtual machine

[polar tulip]

Ah, that is very cool. Thanks!

[fickle patrol]

does anyone have a writeup for Procedural

[stark atlas]

.

[oblique zephyr]

solved version of procedural

[oblique zephyr]

see file above for a solved state

[fickle patrol]

thx

[crystal turtle]

only missing a lambda writeup now, hope one will be released

[iron summit]

Lost in your Eyes is a great challenge. Props for designing that one!

[shell obsidian]

guys can someone explain babymix challenge i read writeups but understand nothing. i want to know what is the general idea to solve that challenge. i decompile it and trying to solve it using linear equation solver and bruteforce but it did'nt work but in the writeups they did some scripting and solving it easily but i don't understand any thing any help?

[dapper sierra]

my lost in your eyes solution

https://daydun.com/ctf/dice/vm/

[iron summit]

I copied the decompiled conditions from ghidra into a .py file and then used Z3py to find the solution. I made param_1 a list of 23 z3.BitVec(16)s. Then I made a system of equations and added all the previously mentioned conditions. I also added conditions for the inputs to have values < 128 (because they need to be ASCII). Finally, I called the solve function and printed the model, which gave me the flag. The script ran pretty much instantaneously.

[umbral imp]

That is very cool. Good job!

[sharp thistle]

@oblique zephyr Are you going to do a writeup on the lambda challenge?

[oblique zephyr]

Yeah I'll probably release source and a writeup tomorrow or the next day. I want to give teams a chance to do their own first. I think some teams did some interesting stuff with black box analysis

[sharp thistle]

Great, we tried that too by counting the number of taken branches in one of the instruction. But our flag was off be 4 chars

[oblique zephyr]

ah yeah, I saw your flag, very close ;p

[boreal mountain]

Props on the code, it's very readable :)

[haughty storm]

how was I supposed to notice this? legit question

[wild hemlock]

any detailed writeup for dice_is_you? I still have no idea about what is the effective way to reverse wasm

[iron summit]

This is the python script I used to solve babymix.

[daring spade]

I usually don't reverse wasm because tooling is crap, I instead just use Firefox's debugger and look at code/values dynamically (I did the same in dice_is_you)

[boreal mountain]

@oblique zephyr Ever tried to make a re challenge for your OCRaaP? https://github.com/hgarrereyn/OCRaaP

[haughty storm]

there were so many locals, whats the workflow?

[haughty storm]

I thought z3 didnt handle XOR's - TIL

[sly quartz]

you need bitvec for xor

ints do not handle xor

[iron summit]

Yeah, I used 16 bit bitvecs because the regular addition might overflow 8 bits. Increasing the size of the bitvecs should not really be a problem, as you have constraints limiting the input values, so the time it takes z3 to find a solution should not be impacted much.

[haughty storm]

i used angr for the problem but added some of the constraints by hand

idk why it wasnt finding the right one straight up

[fringe rover]

And the pro tip: Automate the extraction of the constraints. Took me hours to figure out that i had a typo with t[0x10] and t[10] ...

[daring spade]

in this case you had symbols, so you could easily pinpoint interesting functions. then you only looks at the locals which are used, e.g. add function arguments to the watchlist and stop on it a few times to inspect them

[haughty storm]

how would you do that? sorry if the question is stupid, im still getting into reverse

[fringe rover]

simplest would just be copy-pasting the disassembly and use some regex to reformat it into something that z3 can work with.

[haughty storm]

uh aight

[fringe rover]

Ghidra has a huge API for Scripts, that could probably be used as well.

[haughty storm]

i'll look into it

[iron summit]

+1, this is what I did

[plush geyser]

@oblique zephyr Hey! In your z3 solution for the level 5 of dice is you, I see you have assigned numeric values to the symbols. How are we supposed to find them (looking at the wasm, I was able to find the ids of the tiled used in the spawn_entity function, but they don't seem to match) ? Are these values arbitrary?

[novel lynx]

get_code_value has the table

[plush geyser]

Hmm I had a look at this function but didn't understand what its argument was 😕

[novel lynx]

it was an entity pointer https://github.com/hgarrereyn/dice-is-you/blob/master/src/rules.c#L151

[plush geyser]

Oh ok I see and the entity's type is the same as the one passed to spawn_entity

Makes sense

[hollow hull]

yeah spawn_entity gave you the values.

[jaunty python]

I should be writing and posting my writeup by end of the night.

[novel lynx]

https://github.com/IrisSec/irissec.github.io/blob/master/_posts/2021-02-08-diceisyou.md here's my diceisyou writeup, still working on others

[oblique zephyr]

That's a good question. I thought the fact that all of the A values were ascending prime numbers might hint a bit. But the alternative was to simply write a solver for all paths and get the solution that way. In retrospect, there were several unintended solutions which I didn't like but I think most teams added the constraint that the final flag should be ascii

[oblique zephyr]

Funnily enough, this was actually originally built for a ctf that didn't end up running and then I decided to release it anyways.

[oblique zephyr]

nice writeup! you guys solved this crazy fast as well

[haughty storm]

I thought about it but I didn't really knew how to even approach it. When I noticed I also needed to fill the dots I just gave up given it was well above my "paygrade" as a rev noob

[muted phoenix]

re

[neon heath]

My write-up for dice is you, I was lazy and got the blocks values by inserting break points on code: https://thegoonies.github.io/2021/02/08/dicectf-2021-rev-dice-is-you/

[neon heath]

Nice write-up

[jaunty python]

Debugmen's writeup https://debugmen.github.io/ctf-writeup/2021/02/08/diceisyou.html

[broken onyx]

Still no full writeup for procedural 🥺

[novel lynx]

https://github.com/IrisSec/irissec.github.io/blob/master/_posts/2021-02-09-procedural.md here's how I did procedural

[novel lynx]

^

[broken onyx]

Damn, nice one

[oblique zephyr]

oh wow you solved the whole thing without reversing the modular exponentiation part. I didn't think z3 would actually be that good

so I guess this means you can do modular exponentiation with bitvecs if you just unroll the loop... the more you know...

[desert dagger]

Still no lambda writeup? 😭

[toxic locust]

https://x0r19x91.gitlab.io/post/ctf/2021/dicectf/lambda/

[desert dagger]

Oh shweet

Thanks

[maiden quartz]

⚛️

[novel lynx]

can I not put dicecraft into full screen

[bleak umbra]

for rev/taxes challenge yes or no are the flag ?

[oblique zephyr]

I'm not sure if seamless fullscreen works but you can maximize the window

[novel lynx]

if I maximize the window (at least on windows) it doesn't update the game screen size

[oblique zephyr]

can you try manually dragging the window size

[novel lynx]

fullscreen does not cause the resize event

well I can't because it keeps trying to grab the mouse

[oblique zephyr]

press escape

[novel lynx]

I mean it regrabs the mouse when trying to resize

turns it into tiny window

[oblique zephyr]

hmm let me investigate

[novel lynx]

also dragging the window causes you to fall through the map

[oblique zephyr]

yes, unfortunately there are some collision bugs, you can press F to fly to recover if you fall through the ground

@novel lynx I was able to maximize on windows by doing the following:

• launch the game
• press escape to unlock mouse
• double click the top window bar
• click back in the game

can you see if this works?

[novel lynx]

nah it still looks like this

[oblique zephyr]

what version of windows?

[novel lynx]

Windows 10, version 21H2

[true finch]

this is a windows moment

[oblique zephyr]

@novel lynx can you open a ticket

[novel lynx]

ok

yay

[true finch]

🎲

[novel lynx]

I'm really curious what it was but I can just decompile and diff 🙂

[maiden quartz]

hey no reverse engineering our proprietary game 😠

[novel lynx]

oh yeah good point, my bad

[round terrace]

Copyright DiceGang LLC. Do not distribute.

[chrome viper]

do you mean bitwise and 🤣

[sly quartz]

harry never makes mistakes

🙂

[oblique zephyr]

oof, you are right

[true finch]

oh chute I saw this but forgot to say

[oblique zephyr]

rip

[sly quartz]

it's ok

we can make the pdf parsing harder by updating the pdfs to scribble over "logical" and write "bitwise" over it in comic sans

[round terrace]

[oblique zephyr]

probably would be easiest to print them out and use whiteout

[true finch]

yeah and then scan them

[true finch]

we keep blaming irs boomers

I thought these were written by drs though?

[earnest crow]

quantum challenge 👀

[solar prism]

who can I pm for hyperlink

[abstract herald]

#create-ticket

[mild birch]

is Taxes description just for fun right? XD

[glad night]

there ain't jokes here

[robust stump]

The Taxes description is just math right? no need to look up online calculators, right?

Also why is the rev/universal resources in japanese? Do we need to learn japanese to do the challenge?

[maiden quartz]

Because ptr-yudai chose to write up their solution in Japanese

You'll notice that there are in fact two write-ups linked

[austere plaza]

hey uhh

where's your terms of service?

[oblique zephyr]

if you're asking, you're definitely not in accordance...

[austere plaza]

you know i have the right to sue dicegang LLC in a federal court of diceland

[round terrace]

Jokes on you, DiceGang LLC is registered in Wyoming, not Diceland

[austere plaza]

dammit

well I can still sue for defamation/libel

[round terrace]

:notlikeduck:

[maiden quartz]

The truth is the ultimate defense against libel

[round terrace]

Purge channel, quick!

[fringe portal]

https://tenor.com/view/fail-faliure-emoji-discord-flushed-gif-20547117

[round terrace]

!bean @fringe portal disrespecting organizer omegalul

[quartz sapphire]

✅ hyper#4353 (313105201311645710) was beaned. Reason: disrespecting organizer omegalul

[fringe portal]

[mighty compass]

can someone help me get the game running on windows

[round terrace]

Sounds like you need to install vc redistributable or something

[mighty compass]

😭

[true finch]

ah, I had this issue

you'll probably need some vc redistributables

[mighty compass]

im switching to linux

ffs

[true finch]

and for ucrtbased.dll I had to copy it out of my vs installation

[mighty compass]

windows is just bad

rebooting

[true finch]

true

[serene bramble]

i had to install visual studio

[true finch]

I think it's the windows 10 sdk?

unsure

[novel lynx]

I didn't want to mention it because it wasn't really important

but minimizing the game now crashes it

[true finch]

lmao

[stark atlas]

looks like harry’s not getting sleep 😔

[novel lynx]

oh yeah this is the debug version of ucrtbase

might wanna build in release mode

the chal author not you mob

[mighty compass]

im just on linucks now

[novel lynx]

probably the better choice

I'm just too lazy to switch oses

[mighty compass]

all it takes for me is a reboot

thank god

[novel lynx]

I meant I'm too lazy to reboot lol

[chrome viper]

taxes is unsolvable

[round terrace]

false 🙂

[fickle fractal]

definitely unsolvable

[true finch]

unsolvable as in hard

or unsolvable as in actually broken

[chrome viper]

see☝️

[true finch]

ono

[fickle fractal]

guess I'll make a ticket

[true finch]

harry is sleeping rn

[round terrace]

ono

[hard storm]

Lmfao

[mighty compass]

so

taxes

is hard

very hard

and im starting to think that ive wasted the last hour of my life doing taxes

[fickle fractal]

an hour? try 5 hours

[round terrace]

if only there was TurboTax for the DRS

[slow reef]

Can we have the Diceland IRS streamline taxes pls?

[round terrace]

Please write to your local Diceland representative about your legislative request.

[fringe portal]

you didnt pay your bagel taxes on time Quasar

[mighty compass]

if someone makes TurboTax DRS i will pay $100 to them

[round terrace]

under Diceland law, it is illegal to share counterfeit copies of any tax preparation software

[fringe portal]

damn

[mighty compass]

I will also bribe jyu to look the other way

[round terrace]

If you have complaints about this law, please write to your local Diceland representative about your legislative request.

turnaround time approx 3 years

[slow reef]

21 other organizers

[round terrace]

and also what could you possibly bribe me with 🙃

[slow reef]

dice

[round terrace]

i have dice

[slow reef]

who said we were bribing you tho

[slow reef]

gasp no way

dice ctf has dice?

impossible

[true finch]

hey

[slow reef]

wat are all the organizers just watching...

[round terrace]

our big red status page of down challenge containers

[slow reef]

Lmaooooooo

[chrome viper]

hard or unsolvable

[mighty compass]

near unsolvable

[viral locust]

near unsolvable doesn't always mean unsolvable

only most of the time

[round terrace]

something something NP something something NP complete

or NP hard

idk, im only a cs major

[slow reef]

NP completness problems?

Thats ZPK stuff

coool stuff

Ask robin about it

[round terrace]

😐

[slow reef]

yet I still cant solve rsa

[round terrace]

idk who robin is

idk what zpk is

[slow reef]

ah uh nvm

[slow reef]

Uh I mispelled that sry
ZKP

[round terrace]

oh yes

makes a little more sense

[slow reef]

Nerd genius crypto person from organizers

[round terrace]

from one of us? or from the team Organizers?

[slow reef]

team Organizers

[stark atlas]

robin one of is organi[sz]er's crypto ppl

[slow reef]

only one?
wat are there more megaminds like him wat

one sec gotta look up this team

[stark atlas]

they're experts in positioning 5g hotspots in hotel bathrooms

[slow reef]

lmaooo

[slow reef]

wat did you not know the full employed dice ctf ppl

wat

ok tbf theres like 30

[round terrace]

more than 30

[slow reef]

Wat

[novel lynx]

ayyyy dicecraft down

[round terrace]

ono

[true finch]

wait

there's no server?

[serene bramble]

yooo

[true finch]

oh blood

[novel lynx]

nah I meant I knocked it down

[serene bramble]

first blood

[round terrace]

oh

yes

[novel lynx]

not server lmao

[tender flint]

🎉

[true finch]

very pogo

[tender flint]

congrats

[serene bramble]

🎉

[round terrace]

Harry would be proud

[stark atlas]

next year: multiplayer dicecraft

[serene bramble]

[novel lynx]

that chal was way more complicated than I thought going in

[tender flint]

did irissec also blood DICE IS YOU

[novel lynx]

much harder than dice is you

[tender flint]

last year