maik/Personal-Website
1
0
Fork 0
mirror of https://github.com/maikka39/Personal-Website.git synced 2026-10-02 14:46:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Add hints and update story formatting

Browse Source
This commit is contained in:
maik
2024-12-30 20:55:03 +01:00
parent 1f9042cb72
commit eb70525934
5 changed files with 128 additions and 84 deletions
Download Patch File Download Diff File Expand all files Collapse all files
content/writeups/holiday-hack-challenge/2024/act1/curling.md
+37 -29
View File
@@ -26,31 +26,39 @@ If you want to play the challenge yourself, you can find it here:
## Story line
Let's start off by talking to Bow Ninecandle:
Let's start off by talking to the elf:
```txt
Well hello there! I'm Bow Ninecandle, bright as a twinkling star! Everyone's busy unpacking, but I've grown quite bored of that. Care to join me for a lovely game?
> Well hello there! I'm Bow Ninecandle, bright as a twinkling star! Everyone's busy unpacking, but I've grown quite bored of that. Care to join me for a lovely game?
>
> Oh Joy! Today, We're diving into something delightful: the curling challenge—without any ice, but plenty of sparkle!
>
> No icy brooms here though! We're all about Curl, sending web requests from the command line like magic messages.
>
> So, have you ever wielded Curl before? If not, no worries at all, my friend!
>
> It's this clever little tool that lets you whisper directly to web servers. Pretty neat, right?
>
> Think of it like sending secret scrolls through the interwebs, awaiting a wise reply!
>
> To begin, you can type something like `curl https://example.com`. Voilà! The HTML of the page appears, like conjuring a spell!
>
> Simple enough, huh? But oh, there's a whole world of magic you can cast with Curl!
>
> We're just brushing the surface here, but trust me—it’s a hoot and a half!
>
> If you get tangled up or need help, just give me a shout! I’m here to help you ace this curling spectacle.
>
> So, are you ready to curl those web requests like a pro? Let’s see your magic unfold!
Oh Joy! Today, We're diving into something delightful: the curling challenge—without any ice, but plenty of sparkle!
## Hints
No icy brooms here though! We're all about Curl, sending web requests from the command line like magic messages.
{{< collapsible-block title="cURL Manual" isCollapsed="true" class="tight" >}}
The official [cURL man page](https://curl.se/docs/manpage.html) has tons of useful information on how to use cURL.
{{< /collapsible-block >}}
So, have you ever wielded Curl before? If not, no worries at all, my friend!
It's this clever little tool that lets you whisper directly to web servers. Pretty neat, right?
Think of it like sending secret scrolls through the interwebs, awaiting a wise reply!
To begin, you can type something like curl https://example.com. Voilà! The HTML of the page appears, like conjuring a spell!
Simple enough, huh? But oh, there's a whole world of magic you can cast with Curl!
We're just brushing the surface here, but trust me—it’s a hoot and a half!
If you get tangled up or need help, just give me a shout! I’m here to help you ace this curling spectacle.
So, are you ready to curl those web requests like a pro? Let’s see your magic unfold!
```
{{< collapsible-block title="cURL: Don't squash" isCollapsed="true" class="tight" >}}
Take a look at cURL's `--path-as-is` option; it controls a default behavior that you may not expect!
{{< /collapsible-block >}}
## Recon
@@ -254,15 +262,13 @@ curl -k --path-as-is https://curlingfun:9090/../../etc/hacks
Let's first talk to the elf again, he'll tell us what we'll have to do for gold.
```txt
Bravo! Look at you, curling through that like a true web wizard!
> Bravo! Look at you, curling through that like a true web wizard!
>
> You zipped through that challenge faster than a curling stone on enchanted ice!
>
> You know... rumor has it you can breeze through this with just three commands. Why don’t you give it a whirl?
You zipped through that challenge faster than a curling stone on enchanted ice!
You know... rumor has it you can breeze through this with just three commands. Why don’t you give it a whirl?
```
### Task 1
### Experimenting
At first, I though we could just combine the previous commands in one, and solve it, but, alas, this was not the case...
@@ -276,6 +282,8 @@ curl -k --path-as-is https://curlingfun:9090/../../etc/hacks
Curious as to what we needs to be done, we should explore further. Let's start by listing the files in the current directory. This turns out to be a good idea, as we find a file there; `HARD-MODE.txt`.
### Task 1
{{< figure src="/img/writeups/holiday-hack-challenge/2024/act1/curling/hard-mode.png" title="HARD-MODE.txt" >}}
Turns out we get some more steps to follow. We have already practiced all the things needed here with the silver one, so we can apply the knowledge gained there with this task.
content/writeups/holiday-hack-challenge/2024/act1/frosty-keypad.md
+25 -15
View File
@@ -26,21 +26,33 @@ If you want to play the challenge yourself, you can find it here:
## Story line
Let's start off by talking to Morcel Nougat:
Let's start off by talking to the elf:
```txt
Hello again! I'm Morcel Nougat, dashing around like a reindeer on a sugar rush! We've got a bit of a dilemma, and I could really use your expertise.
> Hello again! I'm Morcel Nougat, dashing around like a reindeer on a sugar rush! We've got a bit of a dilemma, and I could really use your expertise.
>
> Wombley and Alabaster have taken charge now that Santa’s gone missing, and We're scrambling to get the Wish List secured. But... one of the elves in the Data Management Team got overzealous, and the Shredder McShreddin 9000 gobbled up a crucial document we need to access Santa's chest!
>
> It’s our golden ticket to getting Santa’s Little Helper tool working properly. Without it, the hardware hack we're planning is as empty as Santa’s sleigh in January.
>
> Think you can help? I can get you into the Shredder McShreddin 9000’s inner workings to retrieve the pieces, but there are two access codes involved. One of the elves left a hint, but it’s all a blur to me!
>
> I've noticed that some elves keep referring to a certain book when they walk by. I bet it has the answers we need to crack the code and recover the document!
>
> You know, some of the elves always have their noses in the same book when they pass by here. Maybe it’s got the clues we need to crack the code?
Wombley and Alabaster have taken charge now that Santa’s gone missing, and We're scrambling to get the Wish List secured. But... one of the elves in the Data Management Team got overzealous, and the Shredder McShreddin 9000 gobbled up a crucial document we need to access Santa's chest!
## Hints
It’s our golden ticket to getting Santa’s Little Helper tool working properly. Without it, the hardware hack we're planning is as empty as Santa’s sleigh in January.
{{< collapsible-block title="Just Some Light Reading" isCollapsed="true" class="tight" >}}
See if you can find a copy of that book everyone seems to be reading these days. I thought I saw somebody drop one close by...
{{< /collapsible-block >}}
Think you can help? I can get you into the Shredder McShreddin 9000’s inner workings to retrieve the pieces, but there are two access codes involved. One of the elves left a hint, but it’s all a blur to me!
{{< collapsible-block title="Shine Some Light on It" isCollapsed="true" class="tight" >}}
Well this is puzzling. I wonder if Santa has a seperate code. Bet that would cast some light on the problem. I know this is a stretch...but...what if you had one of those fancy UV lights to look at the fingerprints on the keypad? That might at least limit the possible digits being used...
{{< /collapsible-block >}}
I've noticed that some elves keep referring to a certain book when they walk by. I bet it has the answers we need to crack the code and recover the document!
You know, some of the elves always have their noses in the same book when they pass by here. Maybe it’s got the clues we need to crack the code?
```
{{< collapsible-block title="Who Are You Calling a Dorf?" isCollapsed="true" class="tight" >}}
Hmmmm. I know I have seen Santa and the other elves use this keypad. I wonder what it contains. I bet whatever is in there is a **National Treasure**!
{{< /collapsible-block >}}
## Recon
@@ -97,11 +109,9 @@ Woohoo! We got the medal.
Let's first talk to the elf again, he'll tell us what we'll have to do for gold.
```txt
WOW, you did it! You know, they say Ottendorf ciphers were used back in the Frosty Archives crisis… or was that during the Jack Frost incident? Either way, you're amazing!
But wait—there’s still one more code tucked away! This one might need a bit more elbow grease… you may need to try a few combinations to crack it!
```
> WOW, you did it! You know, they say Ottendorf ciphers were used back in the Frosty Archives crisis… or was that during the Jack Frost incident? Either way, you're amazing!
>
> But wait—there’s still one more code tucked away! This one might need a bit more elbow grease… you may need to try a few combinations to crack it!
We also received a new item, but from reading the text we probably only need it for the hardware hacking challenge.