Skip to content

Commit d97de87

theKidOfArcrania theKidOfArcrania

committed

Add writeups

1 parent a3be763 commit d97de87Copy full SHA for d97de87

File tree

4 files changed

+28

-0

lines changed

2022/seccon-quals-2022
- babycmp
  - README.md
- eguite

4 files changed

+28

-0

lines changed

`‎2022/seccon-quals-2022/babycmp/README.md`

Lines changed: 3 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+# babycmp`
	`2`	`+`
	`3`	`+Easily angr'able`

`‎2022/seccon-quals-2022/eguite/.solve2.py.swp`

12 KB

Binary file not shown.

`‎2022/seccon-quals-2022/eguite/README.md`

Lines changed: 4 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,4 @@`
	`1`	`+# Eguite`
	`2`	`+`
	`3`	`+(relatively) easy rust rev that basically checks a ID string against some`
	`4`	`+equations.`

`‎2022/seccon-quals-2022/eguite/solve2.py`

Lines changed: 21 additions & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,21 @@`
	`1`	`+import z3`
	`2`	`+`
	`3`	`+n1 = z3.BitVec('n1', 64)`
	`4`	`+n2 = z3.BitVec('n2', 64)`
	`5`	`+n3 = z3.BitVec('n3', 64)`
	`6`	`+n4 = z3.BitVec('n4', 64)`
	`7`	`+`
	`8`	`+s = z3.Solver()`
	`9`	`+s.add(n1 + n2 == 0x8B228BF35F6A)`
	`10`	`+s.add(n2 + n3 == 0xE78241)`
	`11`	`+s.add(n4 + n3 == 0xFA4C1A9F)`
	`12`	`+s.add(n4 + n1 == 0x8B238557F7C8)`
	`13`	`+s.add((n4 ^ n2 ^ n3) == 0xF9686F4D)`
	`14`	`+print(s.check())`
	`15`	`+m = s.model()`
	`16`	`+n1 = m.eval(n1).as_long()`
	`17`	`+n2 = m.eval(n2).as_long()`
	`18`	`+n3 = m.eval(n3).as_long()`
	`19`	`+n4 = m.eval(n4).as_long()`
	`20`	`+`
	`21`	`+print(f'SECCON{{{n1:012x}-{n2:06x}-{n3:06x}-{n4:08x}}}')`

0 commit comments

Comments

(0)