cscg ist super

2026/cscg/rev/intro1/Dockerfile

@@ -0,0 +1,17 @@
+# run via docker compose :)
+
+FROM ubuntu:22.04
+
+RUN apt-get update
+
+RUN apt-get -y install socat 
+RUN useradd -d /home/ctf/ -m -p ctf -s /bin/bash ctf
+RUN echo "ctf:ctf" | chpasswd
+
+WORKDIR /home/ctf
+
+COPY rev1 .
+COPY flag.txt .
+
+USER ctf
+CMD socat -ddd TCP4-LISTEN:1024,fork,reuseaddr exec:./rev1,pty,echo=0,raw,iexten=0

2026/cscg/rev/intro1/flag.txt

@@ -0,0 +1 @@
+CSCG{testflag}

2026/cscg/rev/intro2/Dockerfile

@@ -0,0 +1,18 @@
+# run via docker compose :)
+
+FROM ubuntu:22.04
+
+RUN apt-get update
+
+RUN apt-get -y install socat 
+
+RUN useradd -d /home/ctf/ -m -p ctf -s /bin/bash ctf
+RUN echo "ctf:ctf" | chpasswd
+
+WORKDIR /home/ctf
+
+COPY rev2 .
+COPY flag.txt .
+
+USER ctf
+CMD socat -ddd TCP4-LISTEN:1024,fork,reuseaddr exec:./rev2,pty,echo=0,raw,iexten=0

2026/cscg/rev/intro2/decode_password.py

@@ -0,0 +1,20 @@
+import ida_bytes
+
+def calc_flag(start_ea, length):
+    raw_data = ida_bytes.get_bytes(start_ea, length)
+    
+    if not raw_data:
+        return None
+    
+    data = bytearray(raw_data)
+    
+    for i in range(len(data)):
+        data[i] = (data[i] + 119) & 0xFF
+    
+    return data
+    
+result = calc_flag(0x2020, 25)
+if result:
+    print(f"Result (hex): {result.hex()}")
+    print(f"Result (string): {''.join(chr(b) for b in result if 32 <= b <= 126)}")
+        

2026/cscg/rev/intro2/flag.txt

@@ -0,0 +1 @@
+CSCG{testflag}