From 23138cdc9874fd9ae70efeb14fb1310efe8334da Mon Sep 17 00:00:00 2001 From: Left4Code Date: Mon, 5 May 2025 21:57:18 -0400 Subject: [PATCH] HashMash --- .../hashing/CTF_BreakDown/placeholder.md | 0 .../hashing/CTF_HashMash/Flag.txt.gpg | 1 + .../hashing/CTF_HashMash/README.md | 52 ++++++++++++++++++ .../source_code_encrypted.zip.gpg | Bin 0 -> 11625 bytes Metadata Forensics/README.md | 3 + 5 files changed, 56 insertions(+) delete mode 100644 Filesystem Imaging & hashing/hashing/CTF_BreakDown/placeholder.md create mode 100644 Filesystem Imaging & hashing/hashing/CTF_HashMash/Flag.txt.gpg create mode 100644 Filesystem Imaging & hashing/hashing/CTF_HashMash/README.md create mode 100644 Filesystem Imaging & hashing/hashing/CTF_HashMash/source_code_encrypted.zip.gpg diff --git a/Filesystem Imaging & hashing/hashing/CTF_BreakDown/placeholder.md b/Filesystem Imaging & hashing/hashing/CTF_BreakDown/placeholder.md deleted file mode 100644 index e69de29..0000000 diff --git a/Filesystem Imaging & hashing/hashing/CTF_HashMash/Flag.txt.gpg b/Filesystem Imaging & hashing/hashing/CTF_HashMash/Flag.txt.gpg new file mode 100644 index 0000000..a14547b --- /dev/null +++ b/Filesystem Imaging & hashing/hashing/CTF_HashMash/Flag.txt.gpg @@ -0,0 +1 @@ +  " X^x:V?n뢒IRgd&$A"WIߋ]pO]bʌ~k!]kaJ JCN'‹ \ No newline at end of file diff --git a/Filesystem Imaging & hashing/hashing/CTF_HashMash/README.md b/Filesystem Imaging & hashing/hashing/CTF_HashMash/README.md new file mode 100644 index 0000000..b7bb2c8 --- /dev/null +++ b/Filesystem Imaging & hashing/hashing/CTF_HashMash/README.md @@ -0,0 +1,52 @@ +# Hash Forensics CTF + +**[Challenge (HashMash)]** + +To complete this CTF, you can use hashcat and hashid and their subsequent guides: + +[hashcat](https://left4code.neocities.org/courses/hash_forensics/hashcat.html) + +[hashid](https://left4code.neocities.org/courses/hash_forensics/hashid.html) + +**1)** Download this repository: + +##### **git clone https://git.qwik.space/left4code/L4C_Forensics_CTF** + +**2)** Run the linux executable ELF file inside of the "Filesystem Imaging & hashing" directory. + +##### **./hashcat_ctf** + +**3)** Go to the terminal in the house. + + +**4)** Copy the hash + + +**5)** Use hashID to determine what kind of hash is being used. + + +**6)** properly format and place it into hashcat as a hashfile + + +**7)** Successfully find the password corresponding to each of the three hashes to get the password + + +**8)** Use the password to decrypt the text file and get the flag. + + +**NOTE** Do you want the source code? + +Upon completing the game, the same password used to get the flag can be used to decrypt the source_code_encrypted.zip.gpg file. + +To build the project, cd into the source_code_encrypted/ directory and run the command: + +#### **make** +- will make the project + +#### **make run** +- will run the executable + +#### **make clean** +- will remove the executable + +If you can't complete the CTF and still want the code, send me an [email](https://left4code.neocities.org/left4code_gpg.txt) and I'll send you the zip file with the code in it. Pretty please send me your gpg key first though so I can encrypt before sending. diff --git a/Filesystem Imaging & hashing/hashing/CTF_HashMash/source_code_encrypted.zip.gpg b/Filesystem Imaging & hashing/hashing/CTF_HashMash/source_code_encrypted.zip.gpg new file mode 100644 index 0000000000000000000000000000000000000000..329d4ee1c4ed6ca424387a8faa4d794676b896a2 GIT binary patch literal 11625 zcmV-vEtb-Z4Fm}T0+E?}M)YBl=l|0G001pi0fD@8%m^~0j6}bPYwb#nh4Isy{{2f; zJbpv0gi$rZxW8)B)QO*9%+=;{;gR)?{7(z8PeM=)EiVg-07}C{{RCw?<*ZdWXuIR-=TkHMRCjz?q82W}_bV2~^;tZz{xu8_02! zG=}ENG`tDRR2EUU%*>sHK5E(8-hLT>LWPHW*cK#f-hqyCX=(oNYJl5S3T?o|vWInj z8LU{lb$08p4c4um5e5?8GK;knn@hLBFm}E+v?m-Bs_y9yl(DS9S52~^4y&KrcbJEK zhG9$j7uI`bOa*}=jiB7D4tF^_XDi6*lY0dl*LzCxcq3C7ie<|sDAdfFzYc;$)Q?P%@CT=-66uL$G z>!Nrq#6IQ^ejck7als^kv;{#QqMe|ZIHg`_3r-!r9n!@13lvInH9BQ^&LzutRF>&0 z=Vm#=I(TB-Btix&6e$klrIL8vD*?9)mMd>S)ioT&EFG^ofS;V@nTC}Pc0u3%XUE+h zA70pq-*efle2`$Wxf1XoJwq>SeidxDH5a(W4r#}D8t{<-&nnT-R3BO|>vtzcNE>1M zSuv0$5+%d{=Qq8HAwkpZIt}Lr#u=mhHngK4^yR|mpMR5yC)vDz6=1AjWaG5gZ%k^N zp9Tsp%BYwI5Cf)_<;fp>G~kd85ox|QsbzA${I_#|r_rj1py6KjzaGK?g^SzUmU3(* zmuSCcrEj$fxo7kIM*_k_iwMZ}_!K>;Lfe~P#0l!2XXB@9BHGdq4x^jsq5z)ZZs8fw zF5YVwAg@RDGmH$sagO0hrEsyHd=P+8PxZfFjl3>X z;%;XxaVtd1V$LMYIsi~*2pW~9{UoZX0d^BVj&{8%KqQF5L{=jM8k`n}!`xAT!zH*I z9h2l*vw}U%Rb8Q~F}_M5 z&zF3VisvGYrFmY44jwjjdq#z*a7cy&way$CSz%&Nq@gmXGQvo=$*pn(7S?LIkTBw~ zL?N7dQ71vHd7dT|=Y@mES8z6mtenBgnM89WO&NV8&X~ONnh(QcNo0HmL+7dOuEKEINXMt%gqf` zK<$b@4~PyFA=>V2{Q~G#D+R@Tq~jm}Gl}Lg$PnbP>vya2!6s=qA}v41hGOg$ zt-mekB+jsPI2kD?Ow;xT**mg+KZH2nxz@`66;+3|NTd@YI-3liNowa^WzhVz3b@uA z@NDK(S4ozyYX$5(+_gRUDz(VN%ulEcx&0iYz|RNMXBS3x4}a&@Aa-9Utqlhew0BRw zy)3KX?o$cRhFTX3-mMF{9LBQD9RlZ58q+dW|9LRa`nR{+hyVNqqh3K4b&Q)C;~Yr1Fsu1$CO!5V zf`D5mwof|Qy2U9Y)`>(Z%g%^fG5}U6F+u(=ODHJ1&0!!x8wPvuX$vMP!i{bRnPlD710ht3>R+ctv4)+h^J zV`2DCFiYwa@e$y0RBO1=7V+(Hmo$Swi2}h? zk5ES2g0*|I)BREm359hia9^_7j^~*i2S1ph9?lh=+9TR%&u>x`{kB(iin&s5!#g;x z5+{jB>-cWHDCqe4i}rE{becMon+^uf8CquVEOv%p#)B~v1z%*Wam|IiCLKW?XeCOu z4AF-zzb5GNZU&gqLIe$Z>i=r+6_s~d0ZWn!%~xP65C5xRJ86|OjozX!f22-PY|rQ zxsBD<*$7wph7)ArBA2ec@$f@T63Athr%Wax;DslZ8h$k9nFW*6`Yy9)2Auh=I$LJX zd!6BzY@U)2J+(l3KB&vC`X8}~+8|3E<^WNu9=P2}508SES~7Kk7b-xdZ>e41Sw%+F zpJ@yGb-R#n(O}*UtV@b(5V5S(WvG`-2 zg(uV8_|G!<8F$Wd^)Xvy_j}Y-c+weO7fRVQ6_2JQK4Gu*{}Q+E_`Cyfr`()#nWf0e z)@!cl3BzV<{kFT)={6iiM)k&vEi?{27oEoE5U7PA*0sGurUFt6dNOeOS{yy z0Hi7A=7upDO1YTwV*j;f3V(4yVc&;A2%@(CxDpZ{fbjaRpkFkJ!lSAADDTrIFFRM=%25gDQ=CE=~==oJ50al8Xk)mXk7k3`B3a-IMp~H~2x|$o7 zEX_J~a$CLo$bwQmd)-YoafQb!3I^?~3PP^+Jv^nXC6ekuU6#Sx?kUhi zd#!VBlg*-Z>Hynaoa!-i+Kz}$ojrmFQ$eBnC2gFDgNGo1A3fC?&mt1v?mLqX6cE4`-SPse+VvS8VZxDo!Zo}hu-D!{ zt)xzamVVS6v`DRO+Sm#5!*A!ap0QbngRfX~mXyH<@3s&RmV_PeCTdHjX1(%hro==W zLL8LI(sX&@B?t!np|K{He@9c4u3OeABXF8mY3-?VaY}6EuQ+kM?l1lg0xLiJ~Kr9l#^@ z46a-yX-%5$D;Ap2bPp*5P6rJKQzN|G6=sESqM_j2<_NY|_}+mSbW_-V58Y z&F|>K4&=#gv&~7q?Rw16j=RYj|4>l!SvSCa>zUFjdprgDsZ3)FhAM3 zd1Y@iUy5Kj^f!Gf>%p8eV2X2ZMoKqJ`NPw%`~k=k_#-_Gu9^4+rAB4lLtP0^ar0+Q zB-_z6SgPK8c5ph@CLAUJ&xAJzCt)Q?8DDMu(ZF(+fVB*y;HJ*B`{4XL=T;2Vdi2^+ z$kVKax-`Gb#2w{>2c*m19=(K5v#O>{3IVHlR}{OR1rhpJ_}Xm0w@~MF6?geTo7ET} z=sz$5Y+hcI0pWPYrOp$+b5~LFG^rzIJigfjup$})RmpD~;!c4P=$2p?y)4xFJ_S^I zT$-Dk&$&}FQQ@@8R7$Ktr-Ta#t`FWgz0^KXkTEwA4T`9j@aJijiPhA9pXUT6G;KI= z0h=azr%+h0AT9Dmr*q)jmg5)j-|h3ake4yn#QjCL$szC7%N-}LV%x36%6_v`XLhk0 zJ|$OY5>lpskk=*?QAovRwGBu>blSaXFVhR2)P2LM&0#x9pb*FSM@YaeB;=st2-gQ? zgrYEX(#E6q5vaDq(-Nd{FyqWr6&U{~#`mCDIM9#HpMbtU4N9c zGs`55?G^W<*mqE&y{MCK;7ObMn~up31OsJFuc?(;6NGGbH2tMg*Lv9#8DzjWONI9VphW3>0Xa$oo%kG$HCC`P zix5Tk5gJ4uG$e-Y(XSBTMR(Ov`DXEct(RqUJFW9!hV=_Uw;YB#KXwSd<;?vh5@EE` ztq6NsPLKBWMtULIHa}8-BWreigxl?rNZTL^a)B8!=g(iWDjOT_YmL-tnL-=lqQ@l0 zazaE);h7V@7w4UVdRS48)i@dgU*mR`*&&%&XVlDqSfeBpNEYuT)J_VRuFwo z99^v?<}TMGS8ubZW4y4x^3v^`R{7l!= z?9r<3OJd;JxGx^~+gNVHGq0kG@v@h+&^pUMPN!x|HyxRSdif-+vpp35@M_Q{SIQKy z_R@Xx0G3K@1an3gVW~A|vL03oH>})g)ZZ$mMqZY5<6$ z{S)Px&A?ntOa#&oxIQj3&C*#Q{pmL(#M`(ito?b`?H^p(cVtKH6m>{7I^rvzkZ%;) zArktPwuCJKfD6@C(;g8^DXL90$`6Cp5foBPPV9E57;GCB+Eg+-tITD$GCwRk2T$78 z#VrLd-F#706rb!zae*Xu@83bwN>eL-S~Y&6vt$C15GH~@!$n(JCg)`}t4v34G5TYa zaiW0R?Zi6+Q(4Wo+MS?RyUEW`P|?U$j%`rsfeo}2dlID4QY$dbza5zI53sKAN(6YreB3?ctIq5TB$a=^UDVht>xc& zd1U8>Bgr3VCun@Cis7mCzJUU6Wj+N%`pALIdb;K|ePfYr&wUEFeGj0&f=l66Cq?6< zK?|x$l~ufi&Q2af!rBWjqMEzulf^KV*rEj)t9zJZ1)@A~%$q^k#F`S1$rxghY z8NA}5w$NT`>g}L!Z3i9Hui8Ngl2Gp|#q#-Q9iqn}s!YQ)0`h`Qoq)+*7> zZx~%GW(Zt8>1-0;WsogVzD=b}HuvzI-Or>plFMO%ohzzc2A+fg|9sIivThQVs@lrM zrxZRPwDfC7{*W1BKU^BWvRl$l*_~e(g3&@dOfQBrb7s$%UTi(>ITBBH{}dtHql1`3SA7yUI`M zstQ7fVD_iQ@<}m{YK3=`7Q|A+!+Wdlm)q)I{-x3ixh&*0*r577b&h8Ae0rZb`K_alt+Yw z6i$rfo1>w3fT8l<;JZ(vvskg3fLPNJ$YoZbd2{I6lJ&B!SkcIkuQZ;4vsfCjL1u0d z%-KjtDazUnl^A1U)2t@2CVSAijPQxer7g3uGiHctk4zP+!>xDd;I%?W)uu$aC!RC5 zwl{ugqi-#2`_tm61`$XSB8=C;v*wiP-i+wP&gjs|-Hh0BirVt~k=LrEkvpjxqsj24 zyhrJ10(d>1H zaTU=SHY6{~Z4P*Tr|S`tDv0*DhyiYi$zf9KQX*f5K$-rOF>o+vZPyhj|H^DvkNCC= zcDCT^qA^IesSi!PpOInGz*Hf4T-6xlj)JB=ez1DTwf~EJpACs2{XwimV9lF`+b?(%w-?i))wyL zJu-(K;TmfO3EM-lv9rTE&r4Sa^tcD?U2G82`GB@Wo5WOw)6kAogAfWf##h?xb-d}5 z*rg;Q6}?->Zi0|xKi^0B@ThCo<%M6PBLiBu&%0K+3p0HNMz;D6p$>GsB-TTdYGE1h9>kBV0F_H6Nb8U**$j4m1y!9LPBd{4mrBD}-q@v)~JYOw8i$YbzV+ z3kgZaXdrgPe$F_KBPVcc^8rv0dXQNJ$dvE;u7_d-83*LJQbWxr|2M+TOe(%c~PgsvwR4B1*4&jjCetXL* zq-xS%sDNm?Q>Xu2>j=K*4bQtz9Mt9TRK_pP;9ulvKJZSR#vzOOZ3yF4O@TB3C|`^b zdff&;{`kZ+3_%Mk@iviz01N<&CZn>%{NwAWUYti83lbWY61}M4)+7=M_cwNGN}}#{aK@0R5H59z|iG+_@%$b|MS1D z2`{eMBS&Tpi34>Mg5t^e+cRju3hh}Qiz3E={G)+^hl)}P0g!a*9zm=*+%l(dExMHl zU}sH5I7VI)UbB?_iuldopEDA*R#!K&66uyYwrmdRymBA`gf2qFgkAwj;aYH>wO|6T zkWgX;3#KGXgyosafy#~y#^zy8PjbJU&Io4HcUk97FmGl{?MlxT5*~4wL^-q6&+1f~ z@z2HQE#~!ldx&rSRn$6LFc%74D?d_jX`IuQI{ZZ13YFkl(x0?_X0@cGc)iQ~`3o;C zsFa8foj(pe0jv-oj~LuHU=$~}^%f5s)+JYJ|2#7@+Rq#EvL{}#Is4U)QG6Ou{jpSDb^_a|Ld;Y&Y^JviLjn6KXi(o8Kb$yXzL{w zJ3^qXVK){R0yETGrWqvKJ!@piPFqZETKT9OHm*v{ z=I6owyJ;t?N^QVX6C~nCwCz&e?%bn#`f+pA+Ypsdi0#oaU#jVA9{=QcIOiMc%QD;^ zId7OsG6aVtS1Q;cd&jVC()nPlc&f~C#xEZpfPZ#-uZ@?~u&gFp#=%NcF%khM9v zj7Og)C*UzZstidvGM;&k+Ezi=l!croFQZ2cjQEE4n=mvQgWm95%FY1L9PN-g;CAk3 zOCc0;T=rWXfBC(D@7=LK;npS>gcv zNd@eA@GFEQO3_gK84^K<1!aLSbL6CP`uK19nCh~O6{@a89{xkk%g>Nx935sYY64a#p<`7OOyx>>~V)gi{ta^Ie$B(r=b+m$~oy%v*J${PS@WuzS>yv+8haW#% zN0j}lFygXClJRX`<~s}a&%lMdZ*fi&DtAQO*{X?DfZM(<2I2Y&TzEX-QD;bVHuCt) z9t$Vv{&HvmegiV=5X*0s2@Jgm^MfFZM_nS@9H4-IWD@W-k~jE3Dw&I}iP)D1k_wse z-_+!D>T6Bq+Hl3_#TX+Cbj*VMb95_Zzv`7boh8P^9EiKd&~bT8)|0gQ*MkSnAE%}; zC0-qRsb`7nl(XTwke+ZN_Miufpf5JoErj zbd12sl2Bn8v3k*$FbH4z{-=7Y2I;#+YZ5^M zVb);30!+fp)TbD*cT>jBoy+FaFv*hM9ChYP=Ps~|WwTJ40w+M$8ho%(4xjsv);fatYLpw^3y!an*Yq(ttn#2QyIo9VhF_NQUd5iq+>UR} zeJ8t^ZLZns)1`Dny)waW@%=tXSrI4+ub`lMM>hTxU9K~3&Uam+`b5=E=(71%DWq7J z8$s8XJ|z>;XEjpE=~ly#rpY66HUkt*CjQpCSUvT`MDJB+ft_SoZz9BG7tJntK#j7? zEDX0f%rHk9XTt?~nT$3CJG-a(qr#fGooSZaDtnMm>#UYz6SIMd>3ehJ) zmy8UF8r`Qu*$TkXTwb0fn=Uv%k1er(CZ7H9j`}-yf~%9@c# zxiuWmNd1-#l^zuPiemw)*&HPdo4oF4>baF+N^=l}sCNnomE{Gs2;#XnC?HYxJR=3E zc+oa2<|V68HNG0i4Cl6$ZZ~g<)li>22cFx?5PfV=(CY;K8o0!!wr07<#%E~QVlydz zK)_=klzlEK6D4nO+tX1mXRc63zQyz)zf~f@b7JG*G4ZM3zZY~pYf@-lF=>6%)j+?w zb08G{oV*F3SCNz3o{zBJFBYTkv-k;-Lln&?uXZXG+C8!Fz6jZ$*6Y!h6k)+UijI=m zYUBX^=W&nuRddxYg4_^Ty8>FKry_Iag5nWH5pm7J^2N3`i`civVr&ir)@gt_H|Y@Z z{198`ceR*tnlc^LkrCOp0b7$(^?C?oCV%<ns_=^rLvNKpsE^U%Fe6c|iF_91w&n zWMnPUH}oD_NLAKuAOdv$2rR(>LEZ&SGT1e$P_-$!`GJ&~n&r+RK~4d|J=umm4cTGq zt-`vWz7zA>&+#fUqN+Yurex7i&C&2&f_fyYRc`{ zcuz54mjvn)6NB#MZZUOA#wQ!4a83>QY~--4?_9A_GU4#tL>T`qr;kmou(%OR<0dU> z4Y1hVvm_by^IZ)=9xzJvfWj}!s%P7kBVw3H%-39cqtYgkyI9}D=G4^!7}I4zhN^Q63tD?SU2lhzt)VABvlUDU16%dr2`H}0KV3c{x*h{+9@gZoNjd!sCv{XBVbDCFNCBo@n7WWpc7hKU)>CHq8p1f)l|od`#`CSds9{ zqhkuUE18^Buv+P&^dov{C1&s*3eE#)eUFwk96_IAIeg;R5n2C>oGsoe*8*8QlI^pl zVu{be(txkCd#uud^1gYm6QX+pRXvC_Ng2sE_`NxMd}rpdcF^0G%YmOV#Vi10v)54p zRMi+awbRPErjHEF)}1q*4-gLFO@{Yuj(fp$bNC~}b+_KBbzoJ`!kCu$4R>xQMM+=3MKc)Pw96P@m!n|o*q8VN>Z6h+8uKMh5}TD@_mfX6yljNG=4U>JgC zc}O&e>`rrvw9oZgYB%~c7q(Q9Z;HxrJg}+UGmiCq<3AuI zwLue(;$Jh|CR*d`t&!E@Y6=vOXd2!8D$=ur+-Flw;>kO8ZNz-AT}XSZ^xmZUE?=a|>=#-Y}2s$&$Z()|A7` z9CJ<>To-3xKG(2zl!7hhq0pO$Q(G9hCp6!>6F~T8cbme$1L}EAAaVVunR1?6J;ffb z1PjwsU!s%@T&%-R49SjlBVRJnmb!MD7#z5DVDKZdLn5JVv8P*ed#X|q2&b@h&8RBLt z+>||_klwAnT;^ee&HXoLb$S{NiO&RZUO)NWL=ihq?Cd)2wD8b76{!p9f%#ARM4b5{ z&pSKtYZB?i2jmfVrVyC`7^vzn;I-4Pe`Fk9_05E#fa>oTyW7Aai88{zTo)aTJw ze)@#ltbwjRF3Tv3qJd~(W55UwNC*YQsjY&)9F@J^cEOeRyqR>%p(6hQi)@wR;kB9J3Mx`$LMaJ%zV81Y{A=4b>&< z7f#mCVbS$-w2qnX%Koj=y$|Xu*24c<66jn(| z!7by4`Y-zmStBEb^{a#Q3&l#V_d;uwOZK=o5*DgBo{pV3*G=>LyA00b!Dwu&!Et(Z z#AWH$IhaJbh`7kMpLv+7^C;EJ6uU=}`_94+>0YnJFzuS8n@jb53M-Ot#WT#yOo}ss zQ5+@N0R2OHND>%pMY74sPTn)`l%1JxyK8#;=&qnmCH=8xSp5WPpJnmT6C~%Q_jA-Q z0lWD`{%xZWZdzm##h5+t1$K3!qlIM^xc;hpgXl38K-3!(&e@`3zok4Ya0Yld;e4sQ z+}MIMz_O%MzJ0-la&4*`NM5>a=%b&pLR(r0jDK&q`B=o>jyA64`-n%VEs9)F*ctBt zJ(B}m!rI&<8dJ+PjS?LCPQAB1+S<*jEItwJE{2}kth%y3mz*}cXQseIFb74l~CH%X$Fupb1tEy*90 zAhk|f%bTrTS#yzN7#7Mg&}X_`hfs|fHtS64x&HFxOXH^F1RC+HcZ6?z z^!X{3UxxIzHg`bJ9s72REX!WZ4y?}Ksjc?u2Ah21sUKZ>v@m1Z7;X-r^U9GA+6ckT z;K9NwS(9d*VQwmiCvF0X@%k?#x!;1)qZSrrurbVl{=8^EZcsL{*G@pEmDw({7wda? n3DFKrNtw6&$d-0Pv8r