Click Here For Free Bricks

• ID: 1
• Category: Forensics
• Value: 100
• Solves: 152
• Solved By Me: False
• State: visible
• Attribution: non_gonzo
• Tags: Wireshark, medium
• Files:
  • https://ctf.umasscybersec.org/files/c1da2e0787ebd99d305ba8fa3bb263e6/click-here-for-free-bricks.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjoyfQ.adnYNA.7wa7I98c4-rzZ-AeAK4RQ6fmgOw

Description

Hey! A man was caught with malware on his PC in Lego City. Luckily, we were able to get a packet capture of his device during the download. Help Lego City Police figure out the source of this malicious download.

The flag for this challenge is the name of this virus on VirusTotal under the details tab with the format UMASS{[String]_[Sha256 Hash]}. For example if your hash is 2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824, there will be a virus name under the details tab with a format similar to ForensicsChallenge_2cf24dba5fb0a30e26e83b2ac5b9e29e1b161e5c1fa7425e73043362938b9824, where "ForensicsChallenge" is an arbitrary string.

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Deep Down

• ID: 6
• Category: Miscellaneous
• Value: 100
• Solves: 131
• Solved By Me: False
• State: visible
• Attribution: cosmicator
• Tags: misc, easy
• Files:
  • https://ctf.umasscybersec.org/files/9c40830a1e8e5eb626950ad6688df550/deep-down.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjo2fQ.adnYNw.WYVzBXIO6Eec2seA8ATrN78Zxbc

Description

There's something in the water...

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Funny Business

• ID: 9
• Category: OSINT
• Value: 100
• Solves: 143
• Solved By Me: False
• State: visible
• Attribution: Posco
• Tags: osint, medium
• Files:
  • https://ctf.umasscybersec.org/files/2b811cb52a301ae696a3c331e1f2ed0c/funny-business.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjo4fQ.adnYOg.nMyNDf0cKNdgJCxLkQ9PMTVkj0Y

Description

My friend tells me there's an office of a store that sells special bricks above a well-known shopping centre on this street. My friend tells me I'll it will bring me joy, but I'm not sure that the bricks are from the famous company. Can you give me the contact email address of the store so I can learn more?

Flag format: UMASS{[email protected]}

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Lego Clicker

• ID: 14
• Category: Reverse Engineering
• Value: 139
• Solves: 96
• Solved By Me: False
• State: visible
• Attribution: pow_a (Powall)
• Tags: rev, hard
• Files:
  • https://ctf.umasscybersec.org/files/60514eaede75c5f0de1ce23cfa1f812c/lego-clicker.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjoxM30.adnYQg.G_RnGECZiPfIH7JzNJpBeI3E9w4

Description

Hackers have taken over and corrupted your beloved Lego Clicker game, can you reclaim the top

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Lost and Found

• ID: 2
• Category: Forensics
• Value: 281
• Solves: 75
• Solved By Me: False
• State: visible
• Attribution: vaakash
• Tags: disk-forensics, crypto
• Hints:
  • Hint 1 cost 0
  • Hint 2 cost 0

Description

Help! I was running commands on my ultra minimalistic Linux VM when I installed my favorite package and everything turned into nonsense!

[LINK TO DOWNLOADABLE ASSETS](https://storage.googleapis.com/umassctf26-static/forensics-lost-and-found/ctf

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Ninja-Nerds

• ID: 3
• Category: Forensics
• Value: 124
• Solves: 98
• Solved By Me: False
• State: visible
• Attribution: mrgreenhathacker
• Tags: forensics, medium
• Files:
  • https://ctf.umasscybersec.org/files/3aab87eb633083cc523a7e179fa3b6e1/ninja-nerds.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjozfQ.adnYQQ.OH004b1XDpo4k4YlkWbD1kK3cEE

Description

where are your little ninja-nerds?

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Son of a Sith...

• ID: 11
• Category: OSINT
• Value: 100
• Solves: 160
• Solved By Me: False
• State: visible
• Attribution: Agent P
• Tags: osint, easy
• Files:
  • https://ctf.umasscybersec.org/files/dd9cd1c5aae5fc4a4f0bdacaf2686aae/son-of-a-sith....zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjoxMH0.adnYPA.sZPnL_egP7QRzMNVmrHj7VQ5L1k

Description

Hopefully I can track down this red brick, because if there’s one thing I know, it’s that I hate sand. Flag format UMASS{What_The_Red_Brick_Does}, eg UMASS{Ground_Pound}

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

Take a Slice

• ID: 8
• Category: Miscellaneous
• Value: 100
• Solves: 102
• Solved By Me: False
• State: visible
• Attribution: cosmicator
• Tags: easy
• Files:
  • https://ctf.umasscybersec.org/files/191c3cd4b744ff0983b96f125c4f04f2/take-a-slice.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjo3fQ.adnYOA.FQVeTe8nMTuasGQMnYP9WoB3hxs

Description

It's in the name!

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

The Accursed Lego Bin

• ID: 17
• Category: Cryptography
• Value: 100
• Solves: 221
• Solved By Me: False
• State: visible
• Attribution: Sam
• Tags: crypto, easy
• Files:
  • https://ctf.umasscybersec.org/files/d80e3a65d493288bb86561d89d6ad9f5/the-accursed-lego-bin.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjoxNH0.adnYPg.IljEpw7ZBT6316Qfv_TRDnhQg-w

Description

I dropped my message into the bin of Legos. It's all scrambled up now. Please help.

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity

We Have 图寻 at Home

• ID: 12
• Category: OSINT
• Value: 481
• Solves: 23
• Solved By Me: False
• State: visible
• Attribution: Posco
• Tags: osint, hard
• Files:
  • https://ctf.umasscybersec.org/files/e61bd7e40680d3b9cea4941432ab703c/we-have--at-home.zip?token=eyJ1c2VyX2lkIjoyMzE3LCJ0ZWFtX2lkIjoxMTY5LCJmaWxlX2lkIjoxMX0.adnYRg.kX7lU3XVwTJ7kgwM8mzrk6ygH0g

Description

I found a serial NOR flash chip with 1024 KB of capacity running at 108Mhz in a children's toy a while back, but I've since lost the chip when I desoldered it to dump it. The only remnant of my search for it was this image I sourced of the office park on the right where the company that made it is located. Can you help me find the name of the chip so I can I replace it?

Flag format: UMASS{name of chip on website}

Use flagCheck to input the flag you get from the challenge to get the actual flag

Author: UMass Cybersecurity