From 6c6da7a3ee1a2909177ff40a4c41e4f204e4c95e Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Manuel=20V=C3=B6gele?= Date: Fri, 18 Oct 2019 15:20:42 +0200 Subject: [PATCH] Add readme --- README.md | 51 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 51 insertions(+) create mode 100644 README.md diff --git a/README.md b/README.md new file mode 100644 index 0000000..52cab12 --- /dev/null +++ b/README.md @@ -0,0 +1,51 @@ +Open Pit +======== + +# Author +Stäbchenfisch + +# Challenge Text +I can't stand these craters that surface mines put in our landscape. It's time to stop them. I've managed to acquire the software running on their servers. Maybe you could use that to get in and disturb their operations? + +# Challenge Idea +Use timing information leaked by a hidden profiler to recover an aes key. (crypto + reversing) + +# Status +Ready with working exploit + +# Reviewers +dezk, pspaul (I think. Don't know the names that well yet :P) + +# Setup +Compiling the Sources: +``` +meson build +ninja -C build +strip build/open_pit +``` + +The resulting binary is needed for deployment *and* should be published with the challenge. + +Run the binary: +``` +socat tcp-listen:1337,reuseaddr,fork exec:"./open_pit" +``` + +# Administration +## Hardware Requirements + +- Number of cores: 4 +- RAM: 1 GB + +## Environment / Permissions +- Distro: Arch +- Requires write access to /tmp: no + +# Solution +See solution/automated_attack.py + +# Difficulty +Medium + +# Flag +flag{If_coal_is_so_bad_for_the_environment_why_dont_we_just_burn_it_all?!?}