This dojo is centered around PRNGs (Pseudo-Random Number Generators)
and the exploitation of the "pseudo" part.
If you have any experience with reverse-engineering and want to learn
by doing, feel free to stop reading now and go dig around in the bins -
all main challenges should be solvable without any guidance!
If you get stuck and need a hint, or want to learn more about the
intended approach and the concepts behind it - each challenge has a
series of encrypted hints. Dectypting them is easy:
Algorithms and implementation details
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
Connect with SSH
Link your SSH key, then connect with: ssh hacker@pwn.college
Hint 1
VGhlIHNlZWQgaXMgdW5pcXVlIGZvciBldmVyeW9uZSBiZWNhdXNlIGl0IGlzIGJhc2VkIG9uIHlvdXIgL2ZsYWcuClRoaXMgYWxzbyBtZWFucyB0aGF0IGEgaGFyZGNvZGVkIHNvbHV0aW9uIGZvciBwcmFjdGljZSBtb2RlIHdpbGwKbm90IHdvcmsgaW4gY2hhbGxlbmdlIG1vZGUgYmVjYXVzZSB0aGUgZmxhZ3MgYXJlIGRpZmZlcmVudCEK
Hint 2
VGhlIGludGVuZGVkIHNvbHV0aW9uIHJlcXVpcmVzIHJlc3RhcnRpbmcgdGhlIGNoYWxsZW5nZSBwcm9ncmFtIG9uY2Uu
Hint 3
VGhpcyBjaGFsbGVuZ2UgaXMgYWxzbyBzdXBwb3NlZCB0byB0ZWFjaCB5b3UgdG8gc3RvcmUgb3V0cHV0cyAtIHlvdSdsbApiZSBkb2luZyB0aGF0IGEgbG90IGluIGZ1dHVyZSBjaGFsbGVuZ2VzLgo=
Connect with SSH
Link your SSH key, then connect with: ssh hacker@pwn.college
Hint 1
VGhpcyBpcyB0aGUgb25seSBjaGFsbGVuZ2Ugd2l0aG91dCBhIGhhcmRjb2RlZCBQUk5HIGFsZ29yaXRobSAtIHRoYXQncwpieSBkZXNpZ24sIHRvIG1ha2UgaXQgZWFzaWVyLiBZb3UgYXJlIG5vdCBzdXBwb3NlZCB0byByZXZlcnNlLWVuZ2luZWVyIGl0IC0KeW91IGNhbiB1c2UgaXQgYXMtaXMuCg==
Hint 2
VGhlIG9yaWdpbmFsIHByb2dyYW0gd2FzIHdyaXR0ZW4gaW4gQywgYW5kIHRoZSBlYXNpZXN0IHNvbHV0aW9uIHdvdWxkIGJlCnRvIGp1c3QgY2xvbmUgdGhlIHJlbGV2YW50IHBhcnRzIGluIGEgQyBwcm9ncmFtIG9mIHlvdXIgb3duLgo=
Hint 1
SW4gY2FzZSBvZiBMRlNScywgeW91IGNhbiBnZXQgdGhlIGluaXRpYWwgc3RhdGUgYnkganVzdCByZWFkaW5nIHRoZSBhbW1vdW50Cm9mIGJpdHMgZXF1YWwgdG8gTEZTUidzIGxlbmd0aC4gQ29tYmluZSB0aGF0IGFuZCB0aGUgZmFjdCB0aGF0IHRoZSBzZWVkIGlzCmZpeGVkIHRvIGRldmVsb3AgYSBmbGV4aWJsZSBzb2x1dGlvbiB0aGF0IGNhbiBiZSByZXVzZWQgaW4gdGhlIGZ1dHVyZS4KCg==
Bonus hint
TEZTUidzIG91dHB1dHMgbG9vcCBhcm91bmQgYWZ0ZXIgMiB0byB0aGUgcG93ZXIgb2YgTEZTUidzIGxlbmd0aCBtaW51cyBvbmUuCkhlcmUgaXQncyAyKio3LTE9MTI3LCBzbyBleHBsb2l0aW5nIHRoYXQgaXMgYSB2YWxpZCBhcHByb2FjaCEKVGhlIG5leHQgY2hhbGxlbmdlIHRob3VnaC4uLgoK
Connect with SSH
Link your SSH key, then connect with: ssh hacker@pwn.college
Bonus hint
TEZTUnMgd2l0aCBzaW1wbGUgcmF0aW9zIGJldHdlZW4gdGhlIGxlbmd0aCBhbmQgdGFwIHBvc2l0aW9ucyBjYW4gZ2VuZXJhdGUKcmVhbGx5IGZ1bmt5IHBhdHRlcm5zIHdoZW4geW91IHByaW50IHRoZSByZXN1bHRzIG91dCBpbiB0d28gZGltZW5zaW9ucyEKVGhhdCdzIHdoeSB0aGlzIGNoYWxsZW5nZSB1c2VzIHByaW1lIG51bWJlcnMgZm9yIHRob3NlIDopCgo=
Connect with SSH
Link your SSH key, then connect with: ssh hacker@pwn.college
Final note - read after finishing
VGhhbmsgeW91IGZvciBwbGF5aW5nIFRIQVchIEkgaG9wZSB5b3UgaGFkIGFzIG11Y2ggZnVuIGFzIEkgZGlkIG1ha2luZyBpdCA8MwpJZiB5b3UgaGF2ZSBhbnkgZmVlZGJhY2sgb3Igb3RoZXIgdGhvdWdodHMgdG8gc2hhcmUgLSBjeWFuYnVuOTZAZ21haWwuY29tCiAgLUN5YW4KCmMyYjEzZTIzY2FiY2YwZTJhNzViZTI0MTU4NTFlMmQzCgo=
Connect with SSH
Link your SSH key, then connect with: ssh hacker@pwn.college
The True End
TGV2ZWwgNzc3Nzc3NwoKRGlmZmljdWx0eToKICBSdWxlczogWyoqKioqKjc3NyB3aW4gc3RyZWFrLCAxMDAwIHJvdW5kcywgNzc3IHRpbWVzKQogIFNlZWQ6ICBYWFhYWCAoZ2V0ZW50cm9weSkKICBQUk5HOiAgWyoqKioqXXhvcm9zaGlybzEyOCspCgogIFRoZSBzdGF0ZSBtdXN0IHJlc2V0IGFmdGVyIGVhY2ggZnVsbCB3aW4gc3RyZWFrLgogIE9ubHkgYSBkZXRlcm1pbmlzdGljIHNvbHV0aW9uIHdpbGwgd29yay4KCiAgLUN5YW4KCg==
Connect with SSH
Link your SSH key, then connect with: ssh hacker@pwn.college
30-Day Scoreboard:
This scoreboard reflects solves for challenges in this module after the module launched in this dojo.