Codehead's Corner
Random ramblings on hacking, coding, fighting with infrastructure and general tech
Posted: 6 Feb 2022 by Codehead
6 minute read

It’s been a while since I did any CTFs. I figured it would be fun to revisit the scene and see if I could learn something new.

Here’s a Web challenge from DiceCTF 2022. I really need to brush up and my web skills and I’ve never even looked at NodeJS before.

Challenge

web/knock-knock

BrownieInMotion

107 points

Knock knock? Who’s there? Another pastebin!!

https://knock-knock.mc.ax


Categories: CTF Hacking
Posted: 6 Feb 2022 by Codehead
6 minute read

Intro

Following on from breaking Wordle in my earlier post, I decided to use the data extracted from the app to try and work out the best starting words for the game.

I’ve seen a few articles about people’s chosen starter which is often based on vowel-heavy words. However, I have all the solutions and the valid words, so I can run some analysis and select a statistically accurate answer rather than guessing a word.

There is a lot of analysis, charts and statistical calculation below. The idea is to walk through the process so you understand why the words were selected. However, if you just want the results, scroll to the bottom of the page.

Facts and Figures

The solution list contains 2315 words. This means that Wordle has enough daily answers to run until Oct 21, 2027. The recent news that the game has been bought by the New York Times had people rushing to save a local copy of the game to play for free ‘forever’. Looks like we only have 5 years worth of games unless the answer list is extended.

The valid word list is much bigger at 10657 words. Some of the entries are pretty bizarre, so it wouldn’t be a good idea to use those as an extended solution list. However, if this was the answer list, the game could run until Aug 23, 2050. Only really an option if you’re happy with answers like: “aiyee”, “akkas”, “buhls”, “dzhos” and “thagi”.


Categories: Analysis Misc
Posted: 28 Jan 2022 by Codehead
3 minute read

Intro

The year is 2022 and EVERYONE is playing Wordle.

Wordle is a fun little word game that anyone can pick up and play. Six guesses to find a five letter word. It is surprisingly addictive.

However, after solving the daily puzzle I found I had to wait 24 hours for the next one. Like any self respecting hacker I wasn’t having that so I smashed F12 to have a dig around in the guts of the game.


Categories: Hacking Hacks
Posted: 28 Jan 2018 by Codehead
2 minute read

Problem

Description: this chall sucks, you should watch VIE vs UZB match. :)
VIET NAM VO DICH!
Author: kad96
Website: Link

Visiting the website gave me a blank page. There had to be something more hidden here.


Categories: Hacking CTF
Posted: 23 Jan 2018 by Codehead
2 minute read

Challenge

Aalekh joined IIIT in 2014. Soon, he started selling T-shirts and hoodies. One day, Aalekh got a big order and trusted his childhood friend to handle the order. But his friend betrayed him and sold bad pieces. College students got angry and tried to beat Aalekh up. His good friend, Anshul, wanted to save him. To prevent Aalekh from going under loss, he has to sell 500 T-shirts on the market, the only condition being, customers have to be unique.

Can you help Anshul sell 500 T-shirts?

https://felicity.iiit.ac.in/contest/breakin/questions/uuid/

Flag Format: BREAKIN{[0-9A-Za-z_]+}


Categories: Hacking CTF
Posted: 15 May 2016 by Codehead
4 minute read

This was a nice SQL injection challenge from TU CTF.

Challenge

We are trying to find out what our grade was, but we don’t seem to be in the database…

Can you help us out?

http://104.199.151.39/index.html


Categories: Hacking CTF
Posted: 18 Apr 2016 by Codehead
2 minute read

This was a nice little web challenge from sCTF. I’m trying to do more web challenges as it’s one of my weaker areas.

Challenge:

The ducks and I have a unfinished score to settle.
http://ducks.sctf.michaelz.xyz/

Hint:
If you’ve remember HSF, you’ll know that The Ducks is unsolvable.


Categories: Hacking CTF
Site powered by Hugo.
Polymer theme by pdevty, tweaked by Codehead