CSAW 2011 - Reversing - Python 200

Mon, 26 Sep 2011 06:43:41 +0000

Python - 200 Points

nc csawctf.poly.edu 53080

When we connected to the port it was running a service Haderper:

-----------------------------
| Welcome to Haderper! |
| Please enter your command |
-----------------------------
> help
Haderper v0.1-alpha
Command help:
help - this screen
exec - execute a command
derp - derp a string
underp - underp a string
logout/exit - disconnect
> derp hi
UydoaScKcDAKLg==
> underp UydoaScKcDAKLg==
hi
>

If we decode the base64 string we can see that it looks like a Pickle dump file:

Csaw on blag

CSAW 2011 - Reversing - Python 200