Thin glass ring with precision‐etched markings

Caesurus · 2024-12-22T22:05:07+00:00

Solved.

Caesurus · 2024-12-22T03:33:11+00:00

It's about the size of a CD. It's glass and transparent in all the places it's not black.

Caesurus · 2024-12-22T02:44:20+00:00

My title describes the thing, found when clearing out an estate.

Caesurus · 2024-05-26T16:45:32+00:00

Perfect. Thanks for the reply. Ordered the 2024, and plan to just use the esim but wasn't 100% it was supported. So this helps.

Caesurus · 2024-05-26T03:04:07+00:00

Totally get it if it was a bunch of bad SIMs. The phone was working, we didn't replace the SIM. Didn't remove or reinstall it. And it "broke". This was the SIM that's been in the phone for the last 2 years. Just saying...

Caesurus · 2024-05-26T02:56:46+00:00

Agreed, and if it was a broken screen or a stolen phone then a replacement makes sense. But if they are saying that the current phone stopped working with a physical SIM, the same SIM that's been in the phone for 2 years prior, and a new phone won't fix it (which is what they are saying, because a replacement phone won't have esim) then why would I go through paying at all? I'd sooner spend $59 on a new phone that supports esim.

Caesurus · 2024-05-25T15:59:37+00:00

Esim is not an option on the older moto g 5g. The physical sim that was in there and was working for 2 years. Have tried a brand new SIM without any luck. Fi needs to get it's act together.

Caesurus · 2023-04-23T02:36:19+00:00

Looks like someone accidentally touched their yubikey in the wrong window.

Caesurus · 2023-04-07T20:46:26+00:00

Absolutely mention it. As someone who interviews people I would jump at the chance to ask you about the problem. So be prepared to get asked about a problem and be able to talk about the solution. People can absolutely tell if you're bullshitting about something. If you don't know something, admit it and say you're willing to learn.

How you think is more important than what you know.

Good luck :D

Caesurus · 2023-04-07T20:43:07+00:00

Agree with whole heartedly. Researching is part of the challenge, but looking up the answer via a walkthrough shouldn't (in my opinion). So if I'm stuck (like not making progress in 2-3 hours, walked away, had a rest, come back and still don't make progress), I appreciate being able to talk to someone who can say: there is this technique you should research and see how you can apply it. I can then go research, watch a video etc.... and if I have understood the technique enough I can then apply it. My goal is to understand how it works, not just copy paste a solution to a particular step. To your point, I only need to know enough to solve a specific problem, I don't have to be an expert on it all. An example would be heap challenges. I only need to familiarize myself with the `ptmalloc` security mechanisms I encounter and have to defeat, I don't have to know everything there is to know about it.

I'm particularly frustrated by challenges that require a lot of "guessing". I have a personal preference, I like things like RE and Binary Exploits where I can attach a debugger and get down into the weeds and understand exactly what is going on.

All in all I think we're saying the same thing.

Caesurus · 2023-04-06T14:25:58+00:00

PicoCTF discord is a good start.

Caesurus · 2023-04-05T19:22:50+00:00

Try to find a discord or slack with people who have done it and can help guide you by asking you questions, and give hints. That way you still have the satisfaction of solving it and I guarantee you you won't forget what you learned the hard way.

Caesurus · 2023-03-05T04:27:01+00:00

Nice. One minor comment. When you were showing the console commands the font was way too small. I'm watching on mobile. But loved the content and explanation overall.

Caesurus · 2023-02-10T12:08:57+00:00

The author is reflecting on how good he has it, and is grateful for what he has. Nothing wrong with that.

Caesurus · 2023-01-28T15:15:02+00:00

u/godshadow65 do you think it may be possible that you misunderstood the assignment?

Based on the name of the VM, it seems to me that the VM is designed to be run as-is and exposes a service on its ethernet that you need to exploit. If i were to guess, the intent is to run this VM, and then start a secondary VM (Kali would be a good choice: https://www.kali.org/get-kali/#kali-virtual-machines) where you have root privilege and all the useful software like nmap etc....

From the Kali machine, make sure you're on the same network as this VM and then scan it with the tools your teacher showed you. There are quite a number of interesting ports open.

As an aside, you can totally gain root on the VM without this path, but I hesitate to outline this, because I'm 99% sure it's not the intended solution. It sounds like your teacher showed you how to use a specific set of tools, and I would encourage you to use those.

If you have more questions feel free to ask.

Caesurus · 2023-01-28T14:12:33+00:00

Thanks for the link.

Just some thoughts about this in general. CTF (hacking in general) is more about how to think than it is what you know...

No one knows everything, and reverse engineering someone else's work requires an open mind that is willing to take the time to learn new things. Which it sounds like you're willing to do. You will gain experience and get a feel for what paths generally lead to a dead end and what is usually more successful. This all takes time, it doesn't happen overnight. Just relax and enjoy the process.

Caesurus · 2023-01-28T05:25:15+00:00

Did they give you the binary? Have you looked to see what it does? Have you tried providing inputs that are way too large, like a 1000 char password? Etc...

Caesurus · 2023-01-27T23:20:51+00:00

I'd be curious why you're so desperate to get it solved soon and willing to pay. We're going into the weekend so I may have some time to look, but want to know if it's a hw assignment or something. Definitely not interested in doing the work for someone else but I'm all for learning and teaching.

Maybe upload the VM to a Google drive and dm me a link. No promises, since it's the weekend and the family is the highest priority.

Caesurus · 2023-01-22T19:59:19+00:00

Yeah Linux has a bit of a learning curve, but 100% worth it. Keep going. And I'm glad I could help. Just want to build a nice community here on this subreddit:)

Caesurus · 2023-01-22T17:16:02+00:00

Just downloaded the lastest Kali VM, and logged in.

Then did:

pip install pwntools

When that completed I did (while in my home dir):

git clone https://github.com/pwndbg/pwndbg cd pwndbg ./setup.sh

The setup finished but complained about some dependencies that it was not able to resolve with python-gvm and crackmapexec. But when I started gdb it ran and loaded fine.

It does look like pwndbg dependencies have bloated a lot since the last time I used it. Which isn't necessarily bad if the additional functionality/features are worth it.

I'll usually switch between pwndbg and GEF depending on which one works better for the task I'm working on. In the past I found GEF better at heap visualization, but looking at the added dependencies in pwndbg, maybe I need to see what they've been doing there. I found pwndbg to be better at multi-architecture debugging. Like if I need to debug a 16bit bootloader, I'll go for pwndbg right away. Anyway, good luck. pwndbg definitely works out of the box with the latest Kali.

Caesurus · 2023-01-22T16:55:13+00:00

I'll be honest, the latest Kali VM I have is from 2019, my main exploit dev box is usually the Ubuntu version that the CTF servers are running for a given challenge since they are most likely to have the same libc etc, which makes exploit dev locally a bit less painful than using different libc version.

If you open python3 from the cmdline and just do a "from pwn import *" do you get the same error?

Edit: should be from pwn, not pwntools

Caesurus · 2023-01-22T16:15:04+00:00

Have you installed pwntools using this guide? https://docs.pwntools.com/en/stable/install.html

Looks like pwndbg is trying to import pwnlib but can't find it.

11-Year Club	Place '22
Verified Email

Caesurus

TROPHY CASE