WIP Insomni'hack

2024-04-26 23:28:35 +02:00
parent b02576a714
commit bdecdfe0b6
18 changed files with 696 additions and 0 deletions
--- a/.DS_Store
+++ b/.DS_Store
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,14 @@

 htb/cyber_apocalypse_2024/pwn/pwn_sound_of_silence/challenge/
+
+insomnihack24/mobile/.venv/
+
+insomnihack24/mobile/Notes/
+
+insomnihack24/mobile/CryptoTest/.idea/
+
+insomnihack24/mobile/CryptoTest/out/
+
+insomnihack24/misc/puzzled/solutions/
+
+insomnihack24/misc/puzzled/pieces/
--- a/insomnihack24/.DS_Store
+++ b/insomnihack24/.DS_Store
--- a/insomnihack24/misc/puzzled/.gitignore
+++ b/insomnihack24/misc/puzzled/.gitignore
@@ -0,0 +1 @@
+.venv/
--- a/insomnihack24/misc/puzzled/output.txt
+++ b/insomnihack24/misc/puzzled/output.txt
@@ -0,0 +1,28 @@
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
+Data: Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. Duis aute irure dolor in reprehenderit in voluptate velit esse cillum dolore eu fugiat nulla pariatur. INS{Im-puzzl3d-6c2bd4d3-e739-4f8d-b8cd-6bd663bde735} Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.
+Type: QRCODE
--- a/insomnihack24/misc/puzzled/puzzled.py
+++ b/insomnihack24/misc/puzzled/puzzled.py
@@ -0,0 +1,126 @@
+from PIL import Image
+import random
+import itertools
+from pyzbar.pyzbar import decode
+
+
+def cutPieces(image_path, output_name_scheme):
+    # Open the image
+    original_image = Image.open(image_path)
+
+    # Get the size of the image
+    width, height = original_image.size
+    assert (width == height)
+
+    # Calculate the size of each grid cell
+    cell_width = width // 3
+    cell_height = height // 3
+
+    # Split the original image into 9 pieces
+    for i in range(16):
+        # Calculate the coordinates of the current grid cell
+        x1 = (i % 3) * cell_width
+        y1 = (i // 3) * cell_height
+        x2 = x1 + cell_width
+        y2 = y1 + cell_height
+
+        # Crop the corresponding part of the original image
+        cropped_piece = original_image.crop((x1, y1, x2, y2))
+
+        # Save the cropped piece
+        output_path = output_name_scheme.format(i)
+        cropped_piece.save(output_path)
+
+
+def generateQRCodes(topLeft, topRight, bottomLeft, pieces):
+    # Create a new image to store rearranged pieces
+    new_image = Image.new("RGB", (234, 234))
+
+    # Paste the QR codes onto the new image
+    new_image.paste(topLeft, (0, 0))
+    new_image.paste(topRight, (156, 0))
+    new_image.paste(bottomLeft, (0, 156))
+
+    print(pieces)
+
+    possible_combos = itertools.permutations(pieces, 6)
+
+    i = 0
+    for a, b, c, d, e, f in possible_combos:
+        # Paste the remaining pieces onto the new image
+        new_image.paste(Image.open(a), (78, 0))
+        new_image.paste(Image.open(b), (156, 78))
+        new_image.paste(Image.open(c), (0, 78))
+        new_image.paste(Image.open(d), (78, 78))
+        new_image.paste(Image.open(e), (156, 156))
+        new_image.paste(Image.open(f), (78, 156))
+
+        # Save the rearranged image
+        new_image.save(f"solutions/possible_qr{i}.png")
+        i += 1
+
+
+def decodeQRCode(image_path):
+    image = Image.open(image_path)
+
+    # Decode the QR code
+    decoded_objects = decode(image)
+
+    # Check if any QR code was found
+    if decoded_objects:
+        # Iterate through all the detected QR codes and print their data
+        for obj in decoded_objects:
+            print("Data:", obj.data.decode('utf-8'))
+            print("Type:", obj.type)
+
+
+def shuffle3x3GridImage(image_path, output_path):
+    # Open the image
+    original_image = Image.open(image_path)
+
+    # Get the size of the image
+    width, height = original_image.size
+    assert (width == 234 and height == 234)
+
+    # Calculate the size of each grid cell
+    cell_width = width // 3
+    cell_height = height // 3
+
+    # Create a new image to store rearranged pieces
+    new_image = Image.new("RGB", (width, height))
+
+    # Create a list to store shuffled grid positions
+    positions = [(x, y) for x in range(3) for y in range(3)]
+    random.shuffle(positions)
+
+    # Split the original image into 16 pieces and rearrange them
+    for i, pos in enumerate(positions):
+        # Calculate the coordinates of the current grid cell
+        x1 = pos[0] * cell_width
+        y1 = pos[1] * cell_height
+        x2 = x1 + cell_width
+        y2 = y1 + cell_height
+
+        # Crop the corresponding part of the original image
+        cropped_piece = original_image.crop((x1, y1, x2, y2))
+
+        # Calculate the coordinates to paste the cropped piece
+        new_x = (i % 3) * cell_width
+        new_y = (i // 3) * cell_height
+
+        # Paste the cropped piece onto the new image
+        new_image.paste(cropped_piece, (new_x, new_y))
+
+    # Save the rearranged image
+    new_image.save(output_path)
+
+
+# key = "Not the real key!"
+# random.seed(key)
+# shuffle3x3GridImage("fullVersion25QRcode.png", "puzzledVersion25QRcode.png")
+
+# cutPieces("puzzledVersion25QRcode.png", "puzzledVersion25QRcode_piece{}.png")
+
+paths = [f"solutions/possible_qr{i}.png" for i in range(720)]
+for path in paths:
+    decodeQRCode(path)
--- a/insomnihack24/misc/puzzled/puzzledVersion25QRcode.png
+++ b/insomnihack24/misc/puzzled/puzzledVersion25QRcode.png
--- a/insomnihack24/mobile/.DS_Store
+++ b/insomnihack24/mobile/.DS_Store
--- a/insomnihack24/mobile/CryptoTest/.DS_Store
+++ b/insomnihack24/mobile/CryptoTest/.DS_Store
--- a/insomnihack24/mobile/CryptoTest/CryptoTest.iml
+++ b/insomnihack24/mobile/CryptoTest/CryptoTest.iml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<module type="JAVA_MODULE" version="4">
+  <component name="NewModuleRootManager" inherit-compiler-output="true">
+    <exclude-output />
+    <content url="file://$MODULE_DIR$">
+      <sourceFolder url="file://$MODULE_DIR$/src" isTestSource="false" />
+    </content>
+    <orderEntry type="inheritedJdk" />
+    <orderEntry type="sourceFolder" forTests="false" />
+  </component>
+</module>
--- a/insomnihack24/mobile/CryptoTest/src/.DS_Store
+++ b/insomnihack24/mobile/CryptoTest/src/.DS_Store
--- a/insomnihack24/mobile/CryptoTest/src/Main.java
+++ b/insomnihack24/mobile/CryptoTest/src/Main.java
@@ -0,0 +1,37 @@
+import javax.crypto.Cipher;
+import javax.crypto.spec.SecretKeySpec;
+import java.io.BufferedReader;
+import java.util.Base64;
+public class Main {
+    public static void main(String[] args) throws Exception {
+        String encoded_text = "uS0D11dq3RM9QimRWfXcewwQdoxYwrZRNUGT205pDfQ=";
+        try(BufferedReader br = new BufferedReader(new java.io.FileReader("src/rockyouAES_Keys.txt"))) {
+            String passphrase;
+            while((passphrase = br.readLine())!= null) {
+                System.out.println("Trying: " + passphrase);
+                try {
+                    String output = decrypt(encoded_text, passphrase);
+                    if(output.startsWith("INS{")) {
+                        System.out.println("Flag: " + output);
+                        break;
+                    }
+                } catch (Exception e) {
+                    continue;
+                }
+            }
+        }
+    }
+
+    private static String decrypt(String str2, String str3) throws Exception {
+        SecretKeySpec secretKeySpec = new SecretKeySpec(str3.getBytes(), "AES");
+        byte[] decode = Base64.getDecoder().decode(str2);
+        Cipher cipher = Cipher.getInstance("AES/ECB/NoPadding");
+        cipher.init(2, secretKeySpec);
+        for (int i = 0; i < 313370; i++) {
+            decode = cipher.doFinal(decode);
+        }
+        Cipher cipher2 = Cipher.getInstance("AES/ECB/PKCS5Padding");
+        cipher2.init(2, secretKeySpec);
+        return new String(cipher2.doFinal(decode), "UTF-8");
+    }
+}
--- a/insomnihack24/mobile/CryptoTest/src/rockyouAES_Keys.txt
+++ b/insomnihack24/mobile/CryptoTest/src/rockyouAES_Keys.txt
@@ -0,0 +1,407 @@
+letsyouupdateyourfunnotesandmore
+11111111111111111111111111111111
+<div><embed src=\\\\\\\\\\\\\\\\
+55555555555555555555555555555555
+stuartandchrisrmybestmatesforeva
+qwertyuiopasdfghjklqwertyuiopasd
+bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb
+badly_batishahrizal@yahoo.com.my
+00000000000000000000000000000000
+!¿«´¯k®åzyi3()y¯`»?¡: i
+้ำพนะ้ำินั55
+้ำทนเสนิรื28
+้นะทฟรส02776481779
+่ำืืรดำพ/จจ/
+ๅคึ/ๅตค-ไิๅค
+แฟืะฟสนีย28082
+ืฟะะ้ฟอำำ.3ท
+ืนืเแฟาำ๘๘09
+ืนืเฟรำื06088645
+ึภจจๅ-ถๅคคๅ-
+าพระหฟืฟ31122524
+าพรกหฟกฟ/ถ-จ
+ันสนอำืนนท12
+ะฟืฟยนืเ55941234
+หำปปัต//คคตค
+รแำสนอำืนื12
+รสนอำันี07ืฟ
+ยีาสีา30ยนพื
+ยพืแำ3291567.แนท
+ฟพทจุค-ึถ/ๅค
+ฟนัฟนัจึจถ/-
+ถจ-/ภึจๅๅจจๅ
+จึจ/ๅภต/จถจๅ
+จภ/ุ-จๅุตจจจ
+จถจถ/ภ/คๅถถถ
+لا7زيلاففنمةلا7زي
+ثةشىةخاشةثيشىصثق
+zzzzzzzzzzzzzzzzzzzzzzzzzzzzzzzz
+youngyuenfamilyreunion@yahoo.com
+youngmoneydademail2006@yahoo.com
+youemom!!!!!!!!!!!!!!!!!!!!!!!!!
+yoquieroamislocosamigos123456789
+yonicacorneliaandreeascumpikafok
+yesseniavaldovinos10@hotmail.com
+yasub_st95@hotmail.com0862794179
+yamahapacificer32145678987654321
+xXxThreeCheersForSweetRevengexXx
+x-newcastle-united-x@hotmail.com
+x-lauren-mcintyre-x@hiotmail.com
+wwwwwwwwwwwwwwwwwwwwwwwwwwwwwwww
+www.jamyle_gilson@hotmail.com.br
+williamrwichardmello@hotmail.com
+whitney_johndeerechick@yahoo.com
+whatthehelldoyouthinkyouaredoing
+wateremlon_sparkle@hotmail.co.uk
+wataciva_prontipadas@hotmail.com
+wannylawandawonniepooh@yahoo.com
+walquiriaoliveira_83@hotmail.com
+virasak777@hotmail.com0207743094
+veysel11111111111111111111111111
+upstate_getit_poppin88@yahoo.com
+unidentified.anonymous@yahoo.com
+ulises dice:  8/07/2008 02:11 PM
+u add ke fs g yg baru aja...ok??
+trystutza91@trystutza91sadsadsad
+trejo_figurita_grone@hotmail.com
+trb12345678910111213141516171819
+totalyblackjack@rochester.rr.com
+titi_hermosa_tiffany@hotmail.com
+throttlemotozoneavenue@yahoo.com
+thehottestchickonearth@yahoo.vom
+tammy4420@plumbing.cfcoxmail.com
+synkornize_aloneness@hotmail.com
+sweetnspicygalsendkiwafortanning
+superwomandany030158@hotmail.com
+supercalifragilisticoespilaidoso
+supercalifragilisticoespialidoso
+superarchirequetecontrapadrisimo
+suntceeacesuntkagula0077k1kagula
+strawberries_r_sweet06@yahoo.com
+stephen_holloway16@hotmail.co.uk
+stephani_la_chula170@hotmail.com
+speedster_69@hotmail.co.ukspeedy
+soygenial_11_america@hotmail.com
+sorinecelmaiprostdincurteascolii
+smilesoftherainbowxoxo@yahoo.com
+simpl3m3nt.marlok.18@hotmail.com
+shory_loscarnales_13@hotmail.com
+shina_rubia@hotmail.com torrejon
+shanikaandcarveywillneverbreakup
+shangooshun161920smrjarcrazywari
+sexysive!!!!!!!!!!!!!!!!!!!!!!!!
+sexc_sweet_n_stylish@hotmail.com
+seronoservivironovivirenfinteamo
+seanpaulseanpaul0103200601032006
+saurabhandnehaaremadeforeachothe
+santodomingorepublicadominjicana
+safy thefreedom5746708+  samar +
+rosemariecatalansenin09183774403
+rosannacoste31@hotmail.com321972
+ronaldo drogba dica bossssssssss
+rihannafantastica_18@hotmail.com
+ricardo izacson dos santos leite
+ricanustiasazicarratuscaramurica
+rhodes.household@btopenworld.com
+reteauacosmoteorangezappvodafone
+rastafari_forevers92@hotmail.com
+rafaela_silva_feltes@hotmail.com
+radoianageorgianacimpoaiegeorgik
+r0000000000000000000000000000000
+punkrockerunderscore13@yahoo.com
+punk_in_drublic_2006@hotmail.com
+puitzitereharilindichiciblablabl
+princetongirl818princetongirl818
+princessdominique12345@yahoo.com
+princesitahermosaconalan12100607
+preeca2531@hotmail.com0833600668
+pppppppppppppppppppppppppppppppp
+poooooooooooooooooooooooooooooop
+pixma27ronaldo270742875874448398
+pilotodeboeng7774758691236584769
+peartreesgrowinginanappleorchard
+patricklovescrystalandthatsafact
+patriciaaalbuquerque@hotmail.com
+pat_yed_me_iisj_iisj@hotmail.com
+pat-i-need-some-body@hotmail.com
+pastorfabio.deoliveira@gmail.com
+paraqueloquieressinolotengopssue
+paola_capricornio159@hotmail.com
+p!laHluri^tJIupRoesYiep@o=brit()
+ozkr_welcometomylife@hotmail.com
+ohg] hfk hg,gd] sdt hggi jhlsg,g
+nutying_dakdee_20150@hotmail.com
+nopassword5555555555555555555555
+nochesbendicen su pasión.lancas
+nicola.priestley88@hotmail.co.uk
+nicknuy_go@hotmail.com 098427915
+neongobyscleaningyellowtangs6527
+nan_za0804@hotmail.com/024108465
+nadiamaria72@hotmail.com19leao21
+myjesusilovetheeiknowthouartmine
+murid_ki_jokobodo_gila_dar@h.com
+mountrathisthebesttownintheworld
+moneymilliondollarbaby@yahoo.com
+mniaiaw3114rdaaalehhihbip2651046
+mmonai_sadsygirl.com@hotmail.com
+mmmmmmmmmmmmmmmmmmmmmmmmmmmmmmmm
+mitacha_warav`pe8990@hotmail.com
+miss_new_booty06@blackplaner.com
+mike@johnson9545.freeserve.co.uk
+michaelpluschrissiistgleichliebe
+maryannandjosh4ever2MAILCITY.COM
+martin_pimped_4life_@hotmail.com
+martarodriguezladiva@hotmail.com
+mariposamcginnismariposamcginnis
+madalinpupaana032319900335805098
+m1111111111111111111111111111111
+lyfsucks1000tymslyfsucks1000tyms
+luvdon\\\\\\\\\\\\\\'tcostathing
+lpl,]lpl]42557554261713lpl,]lpl]
+love.kyawkyawshuman2424881121989
+losfantasmas_chinoby@hotmail.com
+llllllllllllllllllllllllllllllll
+littledaydreamer6942@hotmail.com
+likeafreakonaleash@hotmail.co.uk
+letsyouupdateyourfunNotesandmore
+letsyouupdateyourFunnotesandmore
+letsyouupdateyourFunNotesandmore
+letsyouopdateyourfunnotesandmore
+leoemanuel@hotmail.combrazillion
+leighc.f.ccrightonhondamoviestar
+leidy123y123joseluis123prosimpre
+labebafeliz@hotmail.com   carlos
+knap-jongen@hotmail.com ESTEFANY
+kkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkk
+kingbb_105@hotmail.com0896631865
+king carlos malvados y asociados
+kerryanne.enkinson@hotmail.co.uk
+kanyanut_suppakitkun@hotmail.com
+kankamon_u@hotmail.com0844064584
+justintimberlake1981@hotmail.com
+john-christopher@hotmail.co.u  k
+jessicaandherwonderfulbabies2008
+javilatinlove1@hotmail.com197726
+jasler_el_legendario@hotmail.com
+jaguar_hanter_0105379634_3609335
+jackieandrobertsalazar@yahoo.com
+iwasfineuntilyouwalkedintomylife
+iubireaestedoarpentruceidobitoci
+iluvanjabisset4evashesmawebaexxx
+ilovesasukeandkyleandthenameryan
+ilovehertoobitstilldeathdouspart
+ilovegermanyandmybestfriends4082
+ilovebrocsigenthaler4ever9269408
+iloveamispollasymepelaloqmedigan
+iertareaestesinguracaledesalvare
+ibelieveinfairies_@hotmail.co.uk
+i love you nelson jhun f. andamo
+hvdn_paschmon@hotmail.com1691300
+http://www74.rockyou.com/tos.php
+http://www69.rockyou.com/tos.php
+http://www.rockyou.com/index.php
+http://www.myspace.com/texisback
+http://teamclum.hi5.com087803181
+http://justjaac.spaces.live.com/
+http://dianaitzelONLINE.hi5.com/
+housemuziek maakt jongeren kapot
+hotmailunderstooding@hotmail.com
+horses-n-heelers@cpcinternet.com
+homeroj.simpson_goku@hotmail.com
+hkhg`ntvqugd;hgrvhkgvh];hgnlduh]
+hjfgvbhjfbvnfjgvbjfdbgjvfbjgbjkf
+hermineanddjibrillhappilymarried
+hejjegheddermariaoger11årgammel
+hayasamasakuharasaihiteiseishuku
+georgyanaandreeadiana123prietene
+georgietheprincess@hotmail.co.uk
+gda ugn hgpf dg,l,kh dh h.ydv,kh
+gabrielacarolinalaraperez..sebas
+freedom_death_note_l@hotmail.com
+franciscodetorrontegui@yahoo.com
+filipita004@hotmail.com919270300
+ffffffffffffffffffffffffffffffff
+feeltheimpulseandstitchupthelove
+euiliubescpetheghostofagoodthing
+erinluvsscottandmybffisbrontepoo
+ercanbilgehangulsenkantar3612161
+epc$)rb#pd*%%sm%$^pm&)!sj($^b!b@
+elvenpathangel20paganbornangel20
+elsolitario_tlv_2008@hotmail.com
+elrompe_corazones_17@hotmail.com
+elena_preetyfierro95@hotmail.com
+electricskillet123@sbcglobal.net
+elcalentamientoglobalnosdestruye
+elasticdelabrataraluisosetul2208
+edgardelgadillorosas@hotmail.com
+ed65e09b98bdc70576d6c5f5e2ee38a9
+e54d409c55499851aeb25713c1358484
+duncandisorderly24'hotmail.co.uk
+douapuncteparantezaparantezaaaaa
+doesanythinghappen@hotmail.co.uk
+dj999999999999999999999999999999
+dianamegawatipuspaningrumritonga
+diana_sanz2007@hotmail.com251082
+delerriom_solfatara666@yahoo.com
+dee489981220f2646eb8b3f412c456d9
+deadoralive2ultimate@hotmail.com
+dddddddddddddddddddddddddddyanne
+daveiskinglikemanu@hotmail.co.uk
+darth maul lord of the dark side
+cruzazul1jose_13kilo@hotmail.com
+cristhiangim@hotmail.com 5616230
+crismonaisvs07byamckellyclarkson
+cowboyfreezergirl@embarqmail.com
+costachealexandruconstantinraluk
+corazonelectrico_666@hotmail.com
+complicated09203308520greenday16
+colyne143eda143almirailoveyou143
+colegionuestromaravillosomundoç
+chubbalicious_baby@hotmail.co.uk
+chrismccormick1985@hotmail.co.uk
+chocolatelovevanilla@hotmail.com
+chelseajo@jacksons12.fsnet.co.uk
+cheesetoastmuffed.up@hotmail.com
+chamberofsecrets-vipera_evanesca
+centralsaludintegral@hotmail.com
+cccccccccccccccccccccccccccccccc
+catalina.landaverde40@gmeail.com
+casaeallogioperunaffanculocomete
+carmenmontserrathernandezfarías
+callumspedding1995@hotmail.co.uk
+caitrionamishelshannon1234567890
+cabezççççççççççcabezon
+c4df8d8e225232227c84d0ed8439428a
+brigittezuzlewski@numericable.fr
+brian_please_leave@hotmail.co.uk
+bob11111111111111111111111111111
+blackmetal_satan_666@hotmail.com
+birdmans-s@hotmail.com0897217030
+besiktasjimnastikkulubu123456789
+beerboytao@jumpbee..thaimail.com
+bd9059497b4af2bb913a8522747af2de
+basketball_girls_shoes@yahoo.com
+balloonmasters9228@sbcglobal.net
+babiiboomari80410251079101m71706
+b25d6118ffc44b12b014feb81ea68e49
+arturolovesblacknwhite@yahoo.com
+archie_florentino_pogi@yahoo.com
+angi_13and@hotmail.com angiguapa
+andreiacarineferrire@hotmail.com
+andersonbonfim1dasul@hotmail.com
+amplovelove@hotmail.com059414364
+amaaquienteamanoaquienteilsuiona
+alice-risthehotestgrilintheworld
+alexxroberttanno1969198719832125
+alexandraestelacalculator1995knd
+alejandro_silenthill@hotmail.com
+albertorevolutionsk2@hotmail.com
+aladecaretiazismatasateferestida
+ainsleyemmscotland@hotmail.co.uk
+acest000id111este222securizat333
+abigail_princess01@hotmail.co.uk
+abcdefabcdefcar-natt@hotmail.com
+aawaaweeweewmisterioppoppo`po`po
+aac71eb7307f4c54b12c92d9bd45575f
+aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+a1234567891011121314151617181920
+________________________________
+\\\\\\'i\\\\\\'i\\\\\\'i\\\\\\'i
+\\\\\\';\\\\\\';\\\\\\';\\\\\\';
+XOX-SWEET-M8-NAT-XOX@HOTMAIL.COM
+WWW.PIZU_2703@HOTMAIL.COMHALOXXX
+WOWZO2198RORYISTHEBEST2198COOLIO
+UNDERGROUND\\\\\\'\\\\\\'\\\\\\'
+Saparudin-60163627480.@yahoo.com
+Priincesiitha_emosha@hotmail.com
+PWIPWI_NIKUMY@HOTMAIL.COMKASNO02
+OMN_94@HOTMAIL.COMSOSERVICTORZSC
+Nothing is better than chocolate
+NATHALIAGOMMERDITTER@HOTMAIL.COM
+LUSAILYSCOROMOTODELNOGAL20453629
+LILJOHNNYAKABOOCHIEBOY@YAHOO.COM
+Karen_dance_electric@hotmail.com
+Kaalyah,Jarren,Desmond,Terence#1
+JeremyAlfonzoDillardAKADangerboy
+JUDITH@judithhuey9.wanadoo.co.uk
+IMG0112AIMG0109AIMG0118AIMG0151A
+I love tokio Hotel mai ales bill
+I am a monument to all your sins
+I agree to the Terms of Service.
+Hector Alfredo Lopez Castellanos
+ElmasgrandesiguesiendoRiverPlate
+DR.ROSABELLAANGELADORO@YAHOO.COM
+DIMEQUETEPASO(meheenamoradodeti)
+D6F41C61A9E4B92A8763F1F812738609
+Bill Kaulitz und Andreia Kaulitz
+BBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB
+B1Dx3L29ZiMo0YrQt1982FeBwAtACoMa
+AnGeL21LuVsEaGlEs4EvEr0793To0997
+ANGELINA978@HOTMAIL.COM101777EPM
+AMOLAVIDAPEROMASCONYOUHECTORHDEZ
+ALEXINHOalexinho7931824560qewrty
+A Very Special Love Kilig Scenes
+?????????????????????????\\\\\\'
+<!-- Copied from MySpace.com -->
+9475d62e1f8b13676deab3824492367a
+93948601&usertrace=$!3q7gESu0FxA
+92965710534a9ec4b30f27b1e7f6062a
+92839853879156166491915372959629
+91072456950danielazapataquintana
+88888888888888888888888888888888
+837112034971964732852589631470.0
+80f5a0267920942a73693596fe181fb7
+77angggggggggggggggggggggggggggg
+77777777777777777777777777777777
+76882fb85a1a8c6a83486aba03c031c9
+6rbtop_mayyada-el7ob_elli_kan.rm
+6a60e0e51a3eb2e9fed6a546705de1bf
+6843b9efec36f428deabce22c0fc1805
+67411262262842teamomividaeduardo
+64685004072674860962426156282878
+5dfbcd6390b77d06df9027c8d7d4fe84
+5905277youwillrestinpeace5905277
+46254247and0401816812and46211577
+45262691895d3zst9ed2efc7p5joydos
+4374968e935a9a0f8d56785ea682eb5f
+35ำ81ก06ษรทญฟร35
+30101967130719921306196722071992
+23810511236173248085633529165498
+22222222222222222222222222222222
+21368651ayna77777777777777777777
+19534386020320052326226419298452
+19*+alevivajose02411**04valencia
+16081989suiramuiorudut0728687420
+13420513420508061999134205134205
+123456to32mariaelmoata@yahoo.com
+123456789mychemicalromancemarily
+123456789mihaia1a2a3a4a5a6a7a8a9
+12345678999999999999999999999999
+12345678912345678912345678912345
+12345678910111213141651617181920
+12345678910111213141516171819820
+1234567891011121314151617181920i
+12345678900987654321ugnlpl]hgsd]
+11223344556677889910101111121213
+10351884103518841035188410351884
+100605selmaundma100605selmaundma
+09876543210987654321098765432109
+09096008690090960086900909600869
+09062671639091585851100927336592
+07901491565079015267820790149501
+0753929001291091112580111091991a
+0745253728narcotice1989745253728
+05670567056705670567056705670567
+0410412e7194adc1b419a87a47979c36
+02531570911123456221620101506288
+01265805220102068765010445939101
+01091989040320071202199124022008
+01076459405774934012545741133265
+01053972002064201001613206420214
+.aalexa-voleybalystano1isthebest
+................................
+-จตตจจถจคตต-
+-*/7845123265842624867593518246
+*kiki*ingerashumeu$cumpik*:-*:-*
+%๒๖ืีท๗๑ฒ๘ฬ%
+################################
--- a/insomnihack24/mobile/Notes.apk
+++ b/insomnihack24/mobile/Notes.apk
--- a/insomnihack24/mobile/notes.md
+++ b/insomnihack24/mobile/notes.md
@@ -0,0 +1,7 @@
+first step Login:
+username: admin
+password: fbG6pXd0wm1cz
+
+second step Enter passphrase:
+Base64 encoded Flag: uS0D11dq3RM9QimRWfXcewwQdoxYwrZRNUGT205pDfQ=
+Bruteforced Passphrase: letsyouupdateyourfunNotesandmore
--- a/insomnihack24/mobile/passphrase_break.py
+++ b/insomnihack24/mobile/passphrase_break.py
@@ -0,0 +1,33 @@
+from Crypto.Cipher import AES
+from Crypto.Util.Padding import pad
+import base64
+
+key = b'A'*32  # Unknown 32-byte key
+encrypted_flag = base64.decodebytes(b"uS0D11dq3RM9QimRWfXcewwQdoxYwrZRNUGT205pDfQ=")
+
+def encrypt(plaintext, flag):
+    padded = pad(plaintext + flag, 32)
+    cipher = AES.new(key, AES.MODE_ECB)
+
+    ciphertext = cipher.encrypt(padded)
+    return ciphertext.hex()
+
+
+def bruteforce():
+    flag = ''
+    total = 64 - 1
+    chars = 'abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789_-~!?#%&@{}'
+
+    while True:
+        payload = '1' * (total - len(flag))
+        ciphertext_1 = encrypt((payload+flag).encode())
+
+        for c in chars:
+            ciphertext_2 = encrypt((payload + flag + c).encode())
+            # Comapare the middle blocks ([32:64]) of each encrypted text
+            if ciphertext_2[64:128] == ciphertext_1[64:128]:
+                flag += c
+            print(flag)
+            break
+        
+bruteforce()
--- a/insomnihack24/pwn/welcomeChall/bin
+++ b/insomnihack24/pwn/welcomeChall/bin
--- a/insomnihack24/web/app.py
+++ b/insomnihack24/web/app.py
@@ -0,0 +1,34 @@
+from flask import Flask, render_template, request 
+from flask_sqlalchemy import SQLAlchemy
+from const import FLAG, CRENDENTIALS
+
+app = Flask(__name__)
+app.config['SQLALCHEMY_DATABASE_URI'] = f'postgresql://{CRENDENTIALS}@db:5432/application'
+db = SQLAlchemy(app)
+
+@app.route('/')
+def index():
+    return render_template('index.html')
+
+@app.route('/login', methods=['GET','POST'])
+def login():
+    if request.method == 'GET':
+        return render_template('index.html')
+
+    username = request.form['username']
+    password = request.form['password']
+
+    if username != 'admin' or password[:5] != 'admin' or password[-5:] != 'admin':
+        return 'Login failed. Please check your username and password.'
+
+
+    query = f"SELECT * FROM users WHERE username='{username}' AND password='{password}'"
+    user = db.session.execute(db.text(query)).fetchone()
+
+    if user:
+        return 'Hello admin ' + FLAG
+    else:
+        return 'Login failed. Please check your username and password.'
+
+if __name__ == '__main__':
+    app.run(debug=False, host='0.0.0.0')