https://www.andrew.cmu.edu/user/msadeghi/tags/writeup/Recent content in Writeup on Matin SadeghianHugoen-usSat, 22 Jul 2023 00:00:00 +0000https://www.andrew.cmu.edu/user/msadeghi/posts/java-code-analysis-picoctf-2023-web-writeup/Sat, 22 Jul 2023 00:00:00 +0000https://www.andrew.cmu.edu/user/msadeghi/posts/java-code-analysis-picoctf-2023-web-writeup/<h1 id="description">Description</h1> <p>BookShelf Pico, my premium online book-reading service. I believe that my website is super secure. I challenge you to prove me wrong by reading the &lsquo;Flag&rsquo; book! Here are the credentials to get you started:</p> <p>Username: &ldquo;user&rdquo;</p> <p>Password: &ldquo;user&rdquo;</p> <h1 id="solution">Solution</h1> <p>Before even looking at the source code let&rsquo;s look through the website and see what we have to work with. Logging in with the provided credentials presents us with this page:</p>https://www.andrew.cmu.edu/user/msadeghi/posts/cyberdiscord-open-2023-windows-server-writeup/Sat, 10 Jun 2023 00:00:00 +0000https://www.andrew.cmu.edu/user/msadeghi/posts/cyberdiscord-open-2023-windows-server-writeup/<h1 id="forensics">Forensics</h1> <h2 id="forensics-1">Forensics 1</h2> <p>Question:</p> <p>Hash functions are one-way functions. Secure hash functions have several properties such as collision resistance, preimage resistance, and second preimage resistance. Hashes are the output of hash functions and are typically displayed to the user in hex.</p> <p>There is a file somewhere on this machine named &ldquo;cain.zip&rdquo;.</p> <p>What is the MD5 hash of this file?</p> <p>This question is pretty straightforward. The first step is to find this &ldquo;cain.zip&rdquo; file. For this, I simply installed the <a href="https://www.voidtools.com/">Everything tool from voidtools</a> and searched cain.zip to reveal it&rsquo;s in C:\Windows. After going there with Powershell I ran</p>