THCon logo
Challenge

Rulez

One should seek mail addresses of the following form: <large-random-string-flag>@m0rgan.net.

Please report your achievements by sending a mail to the given addresses. Make sure to use a consistent from field allowing your identification throughout the challenge.

The first challenger reporting the last flag will be considered as the winner, hence scalping fame and rewards. Nevertheless the remaining most proficient participents will also be rewarded with valuable swag.

Nota Bene

challenge@m0rgan.net is NOT a flag. This is a contact mail address.

Gettin' started

Something's hidden here. Good luck.

Step 3 static binaries

Replying to request from participants. Please find a version [link] of step 3 binaries. 

$ openssl enc -d -pbkdf2 -aes-128-ctr -in step3_static.tgz.enc -out step3_static.tgz -k <step2 flag>

Step 4 non-critical bug correction

Step 4 target file has not been truncated correctly during generation. Please use that version [link] of challenge step4 to avoid wasting CPU time.

$ openssl enc -d -pbkdf2 -aes-128-ctr -in step4.tgz.enc -out step4.tgz -k <step3 flag>

Hall of fame

List of step completions

  • Step 0

    • Aymeric Palhière 
      Mon, 06 Mar 2023 10:33:04 +0100
    • T0t0r0 
      Mon, 06 Mar 2023 11:26:37 +0000
    • Arie Haenel 
      Mon, 06 Mar 2023 13:33:54 +0200
    • Joël RABAH 
      Mon, 06 Mar 2023 14:10:20 +0100
    • 0xfab 
      Mon, 06 Mar 2023 14:49:53 +0100
    • beussay 
      Mon, 06 Mar 2023 17:28:02 +0100
    • Yaakov Cohen 
      Mon, 06 Mar 2023 20:39:08 +0000
    • Fabien Perigaud <fabien.perigaud@synacktiv.com> 
      Mon, 06 Mar 2023 22:51:28 +0100
    • Maxime Alliot 
      Mon, 06 Mar 2023 22:55:34 +0100
    • Guy Roux 
      Mon, 06 Mar 2023 22:59:43 +0100
    • 0b11stan 
      Tue, 07 Mar 2023 17:16:38 +0100
    • Ad4m5 
      Tue, 07 Mar 2023 16:19:43 +0000
    • M4ke 
      Tue, 07 Mar 2023 21:24:31 +0000
    • Bertrand Danos 
      Wed, 08 Mar 2023 08:35:51 +0100
    • Thomas Chamelot 
      Wed, 08 Mar 2023 10:12:07 +0100
    • kill Z3Biz 
      Wed, 08 Mar 2023 11:16:11 +0100
    • ( ͡° ͜ʖ ͡°) 
      Wed, 08 Mar 2023 13:43:54 +0100
    • Mathys Vende 
      Wed, 08 Mar 2023 15:23:10 +0100
    • Benoit Mouysset 
      Wed, 08 Mar 2023 21:22:11 +0100
    • Florent METIFEUX 
      Wed, 08 Mar 2023 20:38:24 +0000
    • admin@malsius.com 
      Thu, 09 Mar 2023 10:27:29 +0100
    • pcotret@murena.io 
      Thu, 09 Mar 2023 16:28:14 +0000
    • Antoine Pinaud 
      Thu, 09 Mar 2023 22:50:06 +0100
    • Jack Isback 
      Fri, 10 Mar 2023 14:28:08 +0100
    • SCHAPI 
      Fri, 10 Mar 2023 14:35:26 +0100
    • Julien Atsarias 
      Fri, 10 Mar 2023 22:11:06 +0000
    • Denis Albaladejo 
      Sat, 11 Mar 2023 22:22:09 +0100
    • mh4ckt3mh4ckt1c4s 
      Sun, 12 Mar 2023 20:14:23 +0100
    • Ch3wie 
      Sun, 12 Mar 2023 19:17:04 +0000
    • Arnaud L 
      Tue, 14 Mar 2023 11:52:24 +0000
    • Gilles 
      Tue, 14 Mar 2023 12:25:11 +0000
    • Riviere, Dominique 
      Tue, 14 Mar 2023 13:44:58 +0000
    • Billy TheKid 
      Wed, 15 Mar 2023 01:14:06 +0100
    • Jonathan R. 
      Wed, 15 Mar 2023 14:04:13 +0100
    • Fdroid 
      Wed, 15 Mar 2023 22:09:08 +0100
    • SH 
      Wed, 15 Mar 2023 21:12:34 +0000
    • Inheritor Vision 
      Thu, 16 Mar 2023 21:21:29 +0000
    • Arnaud Girault 
      Fri, 17 Mar 2023 10:51:19 +0100
    • Etno 
      Mon, 20 Mar 2023 15:12:05 +0100
    • wou yam 
      Wed, 22 Mar 2023 12:44:47 +0100
    • ff31dd31 
      Sun, 26 Mar 2023 17:10:26 +0200

  • Step 1

    • Arie Haenel 
      Mon, 06 Mar 2023 20:46:05 +0200
    • Aymeric Palhière 
      Mon, 06 Mar 2023 22:12:49 +0100
    • Fabien Perigaud <fabien.perigaud@synacktiv.com> 
      Mon, 06 Mar 2023 22:51:46 +0100
    • Joël RABAH 
      Mon, 06 Mar 2023 23:43:40 +0100
    • Guy Roux 
      Tue, 07 Mar 2023 21:53:03 +0100
    • kill Z3Biz 
      Thu, 09 Mar 2023 01:22:49 +0100
    • Yaakov Cohen 
      Thu, 09 Mar 2023 11:40:25 +0000
    • Thomas Chamelot 
      Fri, 10 Mar 2023 18:04:32 +0100
    • Jack Isback 
      Mon, 13 Mar 2023 18:46:00 +0100
    • Billy TheKid 
      Wed, 15 Mar 2023 01:14:50 +0100
    • Bertrand Danos 
      Thu, 16 Mar 2023 12:09:10 +0100
    • Inheritor Vision 
      Sat, 18 Mar 2023 13:00:25 +0000
    • Julien Atsarias 
      Sun, 19 Mar 2023 21:41:59 +0000
    • Arnaud Girault 
      Tue, 21 Mar 2023 10:32:39 +0100

  • Step 2

    • Fabien Perigaud <fabien.perigaud@synacktiv.com> 
      Mon, 06 Mar 2023 23:33:24 +0100
    • Arie Haenel 
      Tue, 07 Mar 2023 12:25:56 +0200
    • Aymeric Palhière 
      Tue, 07 Mar 2023 13:12:12 +0100
    • Guy Roux 
      Wed, 08 Mar 2023 14:48:27 +0100
    • Yaakov Cohen 
      Thu, 09 Mar 2023 14:54:51 +0000
    • kill Z3Biz 
      Thu, 09 Mar 2023 19:56:45 +0100
    • Thomas Chamelot 
      Mon, 13 Mar 2023 14:00:45 +0100
    • Billy TheKid 
      Wed, 15 Mar 2023 01:15:24 +0100
    • Inheritor Vision 
      Sat, 18 Mar 2023 16:23:28 +0000

  • Step 3

    • Fabien Perigaud <fabien.perigaud@synacktiv.com> 
      Tue, 07 Mar 2023 01:01:51 +0100
    • Aymeric Palhière 
      Tue, 07 Mar 2023 19:10:30 +0100
    • Guy Roux 
      Wed, 08 Mar 2023 21:10:09 +0100
    • Arie Haenel 
      Wed, 08 Mar 2023 22:52:58 +0200
    • Billy TheKid 
      Wed, 15 Mar 2023 01:13:10 +0100
    • Thomas Chamelot 
      Wed, 15 Mar 2023 14:26:43 +0100
    • Inheritor Vision 
      Sun, 19 Mar 2023 21:40:11 +0000

  • Step 4

    • - much win \°/ - Fabien Perigaud <fabien.perigaud@synacktiv.com> 
      Tue, 07 Mar 2023 22:53:24 +0100
    • - 2nd - Aymeric Palhière 
      Wed, 08 Mar 2023 20:53:19 +0100
    • - 3rd - Arie Haenel 
      Fri, 10 Mar 2023 10:46:22 +0200
    • Guy Roux 
      Sat, 11 Mar 2023 14:55:14 +0100
    • Thomas Chamelot 
      Sat, 18 Mar 2023 10:20:11 +0100