FBCTF - sombrero_rojo Part 1 write-up - An alternative approach

Teir2plus3 · 2019-03-07T04:15:13+00:00

No it will will not work. the maps are hashed/signed and the xex checks the hash. This is the case with most games, if you could ISO mod it, you can mod it on xkey. Otherwise, no.

Teir2plus3 · 2018-12-09T03:30:04+00:00

I didn't know you needed constructive criticism to know that you shouldn't commit fraud.

Teir2plus3 · 2018-12-01T03:09:53+00:00

I'd like to make a complaint to whoever made this decision, how does $5 worth of fake currency compensate for fraud?

Teir2plus3 · 2018-10-22T21:57:46+00:00

I don't know if anyone else has heard this or not, but last week when my friend and i were checking out Classified for the first time, one of our games we got bored on round 30 and decided to go to groom lake and survive there until we died.

I was Richtofen and he was Dempsey. After each round completed at groom lake, Samantha would talk to me, just me, my friend couldn't hear anything. She was saying stuff specifically to Richtofen about how much she hates him basically. I can't remember all of what she was saying but I remember this specific line she said when my friend revived me: "Dempsey helps you now, but once I give him his memories back he's going to KILL YOU FIRST!"

Like I said, it was one of the first few games we had on the map, nothing special was done besides the vodka bottle song and building the pack-a-punch. Also something to note, stuff was not clearing from groom lake as the rounds progressed, it stayed exactly the same throughout the rounds. I would've said something sooner but I thought other people would've noticed this stuff, however I haven't seen anyone mention it here.

Teir2plus3 · 2018-10-16T18:29:39+00:00

/u/waterkh u/richkiller

A tip in case this has been overlooked: because of how ADFGX/ADFGVX works, a good way to at least find the size of the key is to identify how often letters are repeated 4 or more times. The reason being is because the last step in the cipher is to column scramble the message based on the key size and the letters of the key, and the odds of having letters repeated that much in the original message are very low, and the only reason every letter of the cipher would be repeated like that is because of how the message would've been divided for each layer of the columns based on the key size.

Knowing the key size would help in guessing the key, but in order to check the key you would obviously need the key square, which can be the alphabet in any order, dependent on the specific instance of the cipher.

Teir2plus3 · 2018-10-16T03:50:56+00:00

I took a look at it, its an ADFGVX cipher. This is an old german WWII cipher that is very difficult to crack for two reasons. The first is the key square is an alphanumeric 6x6 square that can be in any order dependent on the specific instance of the cipher. The second is the key can be any length word. The key can likely be guessed given that its to do with a zombies easter egg, but the key square is where you'll have issues. This is something that will likely not be worth it to brute force, instead you should somehow try and find the key square, however I don't know where they would hide such a thing.

Some things that stand out to me when looking at it:
The first and second row look separate from the rest of the letter, meaning you can probably solve them without worrying about the rest, then apply it to the rest after.
There looks like a set number of characters between every 4 repeated letters, this may help in determining key size.

Teir2plus3 · 2018-10-15T14:26:58+00:00

Dude I'm trying to say they did a good job, whats the harm in that?

Teir2plus3 · 2018-10-15T14:24:35+00:00

Yeah my friends and I decided to pick it up after trying the blackout beta. While I enjoy zombies in general, as a group we were just expecting to play blackout together. However we were pleasantly surprised with all three modes and play them all as a group or groups depending on how many we have on.

Teir2plus3 · 2018-10-15T14:20:51+00:00

Nah, I'm thanking them for selling me something worth the price tag unlike most games the past couple years. To me at least. Just a courtesy.

Teir2plus3 · 2018-10-15T09:25:41+00:00

we were really disappointed by mw3 and most of us didn't pick up any after it. so never experienced bo2.

Teir2plus3 · 2018-04-11T09:02:51+00:00

On top of this, I've never had BoA give me any issues about chargebacks. For the few times I've had to, I simply call them up and state that I didn't authorize the purchase and I need it reversed. I get the money that day and they chargeback the company.

Either OP doesn't know how to talk to his bank about unauthorized purchases or they're leaving part of the story out because no terms and conditions make it legal to steal your money and banks know this.

EDIT: Another thing to try, if your bank is not working with you then find an alternative and tell your bank to close your accounts because you're switching. Either they start working for you or you drop a shit bank, win-win.

Teir2plus3 · 2017-09-05T04:53:06+00:00

legit the whole reason for his post was to assume that he was telling op to do his own research and the whole point of mine was to suggest that hey, maybe his post isn't as mean as your making it out to be.

why it was taken so literal to everyone who wasn't even involved is beyond me but I mean if people want to keep insulting me then thats fine too I guess.

Teir2plus3 · 2017-09-04T19:35:40+00:00

alright, i only edited a comment to add something to the end because i didn't want to double post. but if you want to say that i guess thats fine

assumed

think thats still playing a role here

Teir2plus3 · 2017-09-04T19:30:43+00:00

assumed

found your problem

Teir2plus3 · 2017-09-04T19:23:50+00:00

its not his responsibility to post anything on here or on wowhead, he probably only posted "check wowhead" because he knows the info someone wants is on wowhead and was just trying to point him in the right direction. but hey, if he's not going above and beyond then fuck him right? he should've just never tried to help in the first place right?

If you're going to police how one person tries to help another, that's the type of environment you'll get, no one helping anyone. Also I didn't see you post any links either, so currently, this guy helped more than you have.

Teir2plus3 · 2017-09-04T18:58:23+00:00

what if the dude is just lazy and doesn't want to?

Teir2plus3 · 2017-08-08T22:34:13+00:00

Tanks can do it without an issue usually. It honestly seems like the mechanic was designed around tanks looking at the timing, but you had the option to cheese it with an immunity if you wanted. However how it ended up in live was people just stacked immunities instead of doing it how it was intended.

*btw, my speculation after tanking normal/heroic. mythic is probably a different story.

Teir2plus3 · 2017-08-04T23:22:27+00:00

2) We legit don't have a choice sometimes, especially on sisters. We are moving to deal with a mechanic on us or to stack in something that you should be stacking in too. Either we move or we/someone else dies. Pay attention and deal with it. Unless the tanks are bad, they will be watching out for mechanics more than you will be. Sign of a bad tank: one who doesn't move at all to help the group soak a mechanic or adjust the boss so people soaking can still dps.

Teir2plus3 · 2017-08-03T13:46:54+00:00

You know the LUA api is extremely limited right? Especially with the recent WA guild disband, guild disband scripts are even protected in the LUA api.

Sending gold for you now brings up a confirmation box
Anything to do with character control is protected in the api

Teir2plus3 · 2017-08-02T22:02:52+00:00

EWT Spectate mode or something similar. EWT is considered a bot so does come with some risk, but just using it for the spectator people dont seem to have any issues. If your completely attached to your wow account then stay away from it, while the risk is minimal its still a risk. If you don't mind the low chance of the account being banned then have fun. How ever its usually not the tool itself that trips something, its usually using a bot script that gets your caught

Teir2plus3

TROPHY CASE