An open API service indexing awesome lists of open source software.

https://github.com/diohabara/nsa-codebreaker-challenge2022

Write-ups for The NSA Codebreaker Challenge 2022: https://nsa-codebreaker.org/challenge
https://github.com/diohabara/nsa-codebreaker-challenge2022

ctf nsa-codebreaker writeups

Last synced: 8 months ago
JSON representation

Write-ups for The NSA Codebreaker Challenge 2022: https://nsa-codebreaker.org/challenge

Awesome Lists containing this project

README

          

# NSA CodeBreaker Challenge 2022

FYI: [Official Write-up](https://nsa-codebreaker.org/static/resource_files/2022-wrapup.html)

## Write-ups

- [x] [A1.pdf](./docs/a1.pdf) | [A1.ipynb](./a1.ipynb)
- [x] [A2.pdf](./docs/a2.pdf) | [A2.ipynb](./a2.ipynb)
- [x] [B1.pdf](./docs/b1.pdf) | [B1.ipynb](./b1.ipynb)
- [x] [B2.pdf](./docs/b2.pdf) | [B2.ipynb](./b2.ipynb)
- [x] [5.pdf](./docs/task5.pdf) | [5.ipynb](./task5.ipynb)
- [x] [6.pdf](./docs/task6.pdf) | [6.ipynb](./task6.ipynb)
- [ ] [7.pdf](./docs/task7.pdf) | [7.ipynb](./task7.ipynb)
- [ ] [8.pdf](./docs/task8.pdf)
- [ ] [9.pdf](./docs/task9.pdf)

## How to build

Dependencies

- `poetry`

Install dependencies by `poetry` and activate `poetry` virtual environment

```bash
poetry install
poetry shell
```

If you want to build all files

```bash
./bin/convert.sh
```

Or a specific file

```bash
jupyter nbconvert --output-dir='./docs' --execute --to pdf .ipynb
```

## References

### A2

- [2021 write-up of network](https://github.com/luker983/nsa-codebreaker-2021/tree/main/task1)
- [what's ssl/tls](https://www.sslcerts.jp/)

### B2

- [Writeup CTF 0x00sec Web - Exercise 1](https://blog.jakubjuszczak.de/writeup-ctf-0x00sec-web-exercise-1/)

### 5

- [Memory Forensics of OpenSSH](http://lists.mindrot.org/pipermail/openssh-unix-dev/2014-May/032565.html)
- [How to recover RSA private key in a coredump of ssh-agent – Sapheads HackJam 2009 Challenge 6](https://web.archive.org/web/20110831073208/https://www.vnsecurity.net/2009/10/how-to-recover-rsa-private-key-in-a-coredump-of-ssh-agent-sapheads-hackjam-2009-challenge-6/)
- [OpenSSH ssh-agent Shielded Private Key Extraction (x86_64 Linux)](https://security.humanativaspa.it/openssh-ssh-agent-shielded-private-key-extraction-x86_64-linux/)
- [Openssh Private Key to RSA Private Key](https://stackoverflow.com/questions/54994641/openssh-private-key-to-rsa-private-key)

### 7

- [CTFのWebセキュリティにおけるSQL Injectionまとめ(MySQL/MariaDB, PostgreSQL, SQL Server)](https://blog.hamayanhamayan.com/entry/2021/12/05/115923)
- [How SQL Injection attack works](https://guicommits.com/how-sql-injection-attack-works-with-examples/)