{"id":20,"date":"2011-06-05T10:01:39","date_gmt":"2011-06-05T10:01:39","guid":{"rendered":"http:\/\/piratesecurityblog.com\/?p=20"},"modified":"2016-09-28T10:02:17","modified_gmt":"2016-09-28T10:02:17","slug":"gchq-challenge-solution-stage-1","status":"publish","type":"post","link":"http:\/\/piratesecurityblog.com\/?p=20","title":{"rendered":"GCHQ Challenge Solution \u2013 Stage 1"},"content":{"rendered":"

I heard about \u201cthe code\u201d at www.canyoucrackit.co.uk during the first friday of december (2011-12-02), and cracked the final stage on sunday two days later. The reason for not cracking it all during friday evening was, unfortunately, not because it presented much of a challenge but because I was out partying pretty much 24\/7 during friday and saturday (including after parties until dawn both nights). \ud83d\ude42<\/p>\n

I didn\u2019t want to publish any writeup until the challenge was over, even though I heard that there were others who didn\u2019t bother waiting. As a man who loves challenges of all kinds, I would hate to be the one spoiling it for someone who actually wanted to give it a try though.<\/p>\n

The first part of the code was this picture:
\n\"\"<\/p>\n

I recognized it as x86-assembler at the first glance, because of the \u201ceb 04\u201d (jmp $+6), the multiple \u201c31 cX\u201d (xor reg, reg), the \u201c90\u201d:s in the end (NOPs) and last but not least the \u201ccd 80\u201d (int 0x80) to mention a few of the immediately recognizable opcodes. The int 0x80 also tells me that this is most likely a Linux-based payload, since 0x80 is the interrupt used for making system calls in Linux. Looking at the code, I could see that it actually just calls exit(0) after the relevant code has been executed.<\/p>\n

By looking at the code in a disassembler I could see that it has a decode-loop, that looks very much like the RC4-cipher (initializing a 256 byte buffer with values 0 to 255, swapping values around based on what corresponds to the RC4-key (0xdeadbeef) followed by a decryption loop. Not that it really matters which crypto is being used, since the key is embedded into the code.<\/p>\n

Looking closer at the decryption loop we can see that it is actually slightly different from the original RC4 cipher, even though the same key scheduling is used.<\/p>\n

Original RC4 can be implemented like this:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n<\/div>\n<\/td>\n
\n
\n
i<\/span> =<\/span> j<\/span> =<\/span> 0<\/span>;<\/span><\/div>\n
ptr<\/span> =<\/span> buf<\/span>;<\/span><\/div>\n
while<\/span> (<\/span>len<\/span>—<\/span> ><\/span> 0<\/span>)<\/span> {<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>i<\/span> =<\/span> (<\/span>i<\/span> +<\/span> 1<\/span>)<\/span> &<\/span> 0xff<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>j<\/span> =<\/span> (<\/span>j<\/span> +<\/span> state<\/span>[<\/span>i<\/span>]<\/span>)<\/span> &<\/span> 0xff<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>temp<\/span> =<\/span> state<\/span>[<\/span>i<\/span>]<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>state<\/span>[<\/span>i<\/span>]<\/span> =<\/span> state<\/span>[<\/span>j<\/span>]<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>state<\/span>[<\/span>j<\/span>]<\/span> =<\/span> temp<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>*<\/span>ptr<\/span>++<\/span> ^=<\/span> state<\/span>[<\/span>(<\/span>state<\/span>[<\/span>i<\/span>]<\/span> +<\/span> state<\/span>[<\/span>j<\/span>]<\/span>)<\/span> &<\/span> 0xff<\/span>]<\/span>;<\/span><\/div>\n
}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

This implementation changes j to the xor-byte in each iteration:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n<\/div>\n<\/td>\n
\n
\n
i<\/span> =<\/span> j<\/span> =<\/span> 0<\/span>;<\/span><\/div>\n
ptr<\/span> =<\/span> buf<\/span>;<\/span><\/div>\n
while<\/span> (<\/span>len<\/span>—<\/span> ><\/span> 0<\/span>)<\/span> {<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>i<\/span> =<\/span> (<\/span>i<\/span> +<\/span> 1<\/span>)<\/span> &<\/span> 0xff<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>j<\/span> =<\/span> (<\/span>j<\/span> +<\/span> state<\/span>[<\/span>i<\/span>]<\/span>)<\/span> &<\/span> 0xff<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>temp<\/span> =<\/span> state<\/span>[<\/span>i<\/span>]<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>state<\/span>[<\/span>i<\/span>]<\/span> =<\/span> state<\/span>[<\/span>j<\/span>]<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>state<\/span>[<\/span>j<\/span>]<\/span> =<\/span> temp<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>j<\/span> =<\/span> state<\/span>[<\/span>(<\/span>state<\/span>[<\/span>i<\/span>]<\/span> +<\/span> state<\/span>[<\/span>j<\/span>]<\/span>)<\/span> &<\/span> 0xff<\/span>]<\/span>;<\/span><\/div>\n
\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>*<\/span>ptr<\/span>++<\/span> ^=<\/span> j<\/span>;<\/span><\/div>\n
}<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

This is actually pretty funny, considering that GCHQ themselves have published an (very brief) explanation of the challenge now after it\u2019s over, which describes the crypto as RC4. So from what I can tell, this is an unintentional bug rather than by design. A mistake that is easily made when you\u2019re hand coding assembler, and not being careful of which registers are used for what, but a rather silly mistake nonetheless.<\/p>\n

Anyway. Analyzing the code further we can see that the payload seems to be missing some important parts, like the buffer that is to be decrypted for instance. This, on the other hand, is definitely by design. \ud83d\ude42<\/p>\n

See the \u201cAAAA\u201d (41 41 41 41) at the end of the payload? That\u2019s a tag that is checked by this piece of code:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n<\/div>\n<\/td>\n
\n
\n
00000042<\/span> 58<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>pop <\/span>eax<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Read <\/span>last <\/span>four <\/span>bytes <\/span>of <\/span>original <\/span>payload<\/span><\/div>\n
00000043<\/span> 3D41414141<\/span>\u00a0\u00a0<\/span>cmp <\/span>eax<\/span>,<\/span>0x41414141<\/span>\u00a0\u00a0<\/span>;<\/span> Compare <\/span>it <\/span>to<\/span> 0x41414141<\/span> (<\/span>“AAAA”<\/span>)<\/span><\/div>\n
00000048<\/span> 7543<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>jnz<\/span> 0x8d<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>;<\/span> Jump <\/span>to<\/span> exit<\/span>(<\/span>0<\/span>)<\/span> code <\/span>if<\/span> no <\/span>match<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

So far so good. If the tag isn\u2019t there, it jumps ahead to the part of the code that calls exit(0):<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n<\/div>\n<\/td>\n
\n
\n
0000008D<\/span> 31DB<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>xor<\/span> ebx<\/span>,<\/span>ebx<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> ebx<\/span> =<\/span> System <\/span>call <\/span>argument<\/span> 1<\/span> =<\/span> 0<\/span><\/div>\n
0000008F<\/span> 89D8<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>mov <\/span>eax<\/span>,<\/span>ebx<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> eax<\/span> =<\/span> System <\/span>call <\/span>number<\/span> =<\/span> 0<\/span><\/div>\n
00000091<\/span> FEC0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>inc <\/span>al<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>;<\/span> eax<\/span> =<\/span> eax<\/span> +<\/span> 1<\/span> =<\/span> 1<\/span> =<\/span> SYS<\/span>_<\/span>exit<\/div>\n
00000093<\/span> CD80\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>int<\/span> 0x80<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>;<\/span> Do<\/span> system <\/span>call<\/span>:<\/span> exit<\/span>(<\/span>0<\/span>)<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Then it continues with checking for another tag (\u201cBBBB\u201d = 42 42 42 42), this tag is _not_ included in the payload:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n<\/div>\n<\/td>\n
\n
\n
0000004A<\/span> 58<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>pop <\/span>eax<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Read <\/span>four <\/span>bytes <\/span>more<\/span>,<\/span> beyond <\/span>the <\/span>original <\/span>payload<\/span><\/div>\n
0000004B<\/span> 3D42424242<\/span>\u00a0\u00a0<\/span>cmp <\/span>eax<\/span>,<\/span>0x42424242<\/span>\u00a0\u00a0<\/span>;<\/span> Compare <\/span>it <\/span>to<\/span> 0x42424242<\/span> (<\/span>“BBBB”<\/span>)<\/span><\/div>\n
00000050<\/span> 753B<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>jnz<\/span> 0x8d<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>;<\/span> Jump <\/span>to<\/span> exit<\/span>(<\/span>0<\/span>)<\/span> code <\/span>if<\/span> no <\/span>match<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

Of course, we can just append this tag to the code to bypass it. This doesn\u2019t really help us much though, since the code then continues with reading a byte count to decrypt, followed by the actual encrypted data:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n<\/div>\n<\/td>\n
\n
\n
00000052<\/span> 5A<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>pop <\/span>edx<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Get <\/span>size <\/span>of <\/span>encrypted <\/span>buffer<\/span><\/div>\n
00000053<\/span> 89D1<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>mov <\/span>ecx<\/span>,<\/span>edx<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Set <\/span>ecx<\/span> =<\/span> Size <\/span>of <\/span>encrypted <\/span>buffer<\/span><\/div>\n
00000055<\/span> 89E6<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>mov <\/span>esi<\/span>,<\/span>esp<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Set <\/span>esi<\/span> =<\/span> Start <\/span>of <\/span>encrypted <\/span>buffer<\/span><\/div>\n
00000057<\/span> 89DF<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>mov <\/span>edi<\/span>,<\/span>ebx<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Set <\/span>edi<\/span> =<\/span> Pointer <\/span>to<\/span> the <\/span>not<\/span>–<\/span>quite<\/span>–<\/span>RC4 <\/span>state <\/span>buffer<\/span><\/div>\n
00000059<\/span> 29CF<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>sub <\/span>edi<\/span>,<\/span>ecx<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Allocate <\/span>space <\/span>before <\/span>the <\/span>not<\/span>–<\/span>quite<\/span>–<\/span>RC4 <\/span>state <\/span>buffer<\/span><\/div>\n
0000005B<\/span> F3A4\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0<\/span>rep <\/span>movsb<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>;<\/span> Copy <\/span>the <\/span>encrypted <\/span>buffer <\/span>to<\/span> the <\/span>allocated <\/span>space<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

After this follows the code that actually performs the decryption, and finally it calls exit(0) just like when the tag on the stack is not found. The exit(0) could be replaced by code that writes the decrypted data to stdout, or we can simply set a breakpoint there (or manually insert a 0xcc = int3 there instead) so we can read the decrypted data in a debugger.<\/p>\n

So, where is the missing data? My first thought was that the data is probably either hidden in the HTML code of the www.canyoucrackit.co.uk page, or that it is hidden within the image of the payload. Hiding it within the image of the payload seemed pretty likely, since it actually was a bit odd that they used an image at all instead of plain text that would allow for copy & paste instead of manually writing the payload down from the image.<\/p>\n

There are several ways to hide data within an image, some more refined than others. The easiest way to do it is to simply inject the data to the hide into some form of meta data. Using \u201cexiftool\u201d we can extract the following text field (although I first noticed it with a simple \u201cstrings\u201d):<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n<\/div>\n<\/td>\n
\n
\n
je<\/span>@<\/span>isis<\/span>:<\/span>~<\/span>$<\/span> exiftool <\/span>cyber<\/span>.<\/span>png<\/span> |<\/span> grep <\/span>Comment<\/span><\/div>\n
Comment<\/span> :<\/span> QkJCQjIAAACR2PFtcCA6q2eaC8SR<\/span>+<\/span>8dmD<\/span>\/<\/span>zNzLQC<\/span>+<\/span>td3tFQ4qx8O447TDeuZw5P<\/span>+<\/span>0SsbEcYR.78jKLw<\/span>==<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

This is quite obviously base64-encoded data, judging from the \u201c==\u201d at the end and the range of characters being used. The following command line reveals its decoded contents:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n<\/div>\n<\/td>\n
\n
\n
je<\/span>@<\/span>isis<\/span>:<\/span>~<\/span>$<\/span> exiftool <\/span>cyber<\/span>.<\/span>png<\/span> \\<\/span><\/div>\n
|<\/span> grep <\/span>Comment<\/span> |<\/span> awk<\/span> ‘{ print $3 }’<\/span> \\<\/span><\/div>\n
|<\/span> perl<\/span> –<\/span>MMIME<\/span>::<\/span>Base64<\/span> –<\/span>e<\/span> ‘print decode_base64(<>)’<\/span> ><\/span> cyber<\/span>.<\/span>bin<\/span><\/div>\n
je<\/span>@<\/span>isis<\/span>:<\/span>~<\/span>$<\/span> xxd<\/span> –<\/span>g1 <\/span>cyber<\/span>.<\/span>bin<\/span><\/div>\n
0000000<\/span>:<\/span> 42<\/span> 42<\/span> 42<\/span> 42<\/span> 32<\/span> 00<\/span> 00<\/span> 00<\/span> 91<\/span> d8 <\/span>f1<\/span> 6d<\/span> 70<\/span> 20<\/span> 3a<\/span> ab <\/span>BBBB2<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>mp<\/span> :<\/span>.<\/span><\/div>\n
0000010<\/span>:<\/span> 67<\/span> 9a<\/span> 0b<\/span> c4<\/span> 91<\/span> fb <\/span>c7<\/span> 66<\/span> 0f<\/span> fc <\/span>cd <\/span>cc <\/span>b4<\/span> 02<\/span> fa <\/span>d7<\/span> g<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>f<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span><\/div>\n
0000020<\/span>:<\/span> 77<\/span> b4<\/span> 54<\/span> 38<\/span> ab<\/span> 1f<\/span> 0e<\/span> e3<\/span> 8e<\/span> d3<\/span> 0d<\/span> eb<\/span> 99<\/span> c3<\/span> 93<\/span> fe<\/span> w<\/span>.<\/span>T8<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span><\/div>\n
0000030<\/span>:<\/span> d1<\/span> 2b<\/span> 1b<\/span> 11<\/span> c6<\/span> 11<\/span> ef <\/span>c8 <\/span>ca<\/span> 2f<\/span>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <\/span>.<\/span>+<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>.<\/span>\/<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

As you can see, it starts with the \u201cBBBB\u201d that the payload looked for after the end of the payload, followed by an 32-bit LSB integer (32 00 00 00 = 0x00000032 = 50 = The size of the encrypted buffer), and finally the 50 bytes of encrypted data.<\/p>\n

In other words, the full payload is as follows:<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n
11<\/div>\n
12<\/div>\n
13<\/div>\n
14<\/div>\n<\/div>\n<\/td>\n
\n
\n
eb<\/span> 04<\/span> af <\/span>c2 <\/span>bf <\/span>a3<\/span> 81<\/span> ec<\/span> 00<\/span> 01<\/span> 00<\/span> 00<\/span> 31<\/span> c9<\/span> 88<\/span> 0c<\/span><\/div>\n
0c<\/span> fe <\/span>c1<\/span> 75<\/span> f9<\/span> 31<\/span> c0 <\/span>ba <\/span>ef <\/span>be <\/span>ad <\/span>de<\/span> 02<\/span> 04<\/span> 0c<\/span> 00<\/span><\/div>\n
d0 <\/span>c1 <\/span>ca<\/span> 08<\/span> 8a<\/span> 1c<\/span> 0c<\/span> 8a<\/span> 3c<\/span> 04<\/span> 88<\/span> 1c<\/span> 04<\/span> 88<\/span> 3c<\/span> 0c<\/span><\/div>\n
fe <\/span>c1<\/span> 75<\/span> e8 <\/span>e9<\/span> 5c<\/span> 00<\/span> 00<\/span> 00<\/span> 89<\/span> e3<\/span> 81<\/span> c3<\/span> 04<\/span> 00<\/span> 00<\/span><\/div>\n
00<\/span> 5c<\/span> 58<\/span> 3d<\/span> 41<\/span> 41<\/span> 41<\/span> 41<\/span> 75<\/span> 43<\/span> 58<\/span> 3d<\/span> 42<\/span> 42<\/span> 42<\/span> 42<\/span><\/div>\n
75<\/span> 3b<\/span> 5a<\/span> 89<\/span> d1<\/span> 89<\/span> e6<\/span> 89<\/span> df<\/span> 29<\/span> cf <\/span>f3 <\/span>a4<\/span> 89<\/span> de<\/span> 89<\/span><\/div>\n
d1<\/span> 89<\/span> df<\/span> 29<\/span> cf<\/span> 31<\/span> c0<\/span> 31<\/span> db<\/span> 31<\/span> d2 <\/span>fe <\/span>c0<\/span> 02<\/span> 1c<\/span> 06<\/span><\/div>\n
8a<\/span> 14<\/span> 06<\/span> 8a<\/span> 34<\/span> 1e<\/span> 88<\/span> 34<\/span> 06<\/span> 88<\/span> 14<\/span> 1e<\/span> 00<\/span> f2<\/span> 30<\/span> f6<\/span><\/div>\n
8a<\/span> 1c<\/span> 16<\/span> 8a<\/span> 17<\/span> 30<\/span> da<\/span> 88<\/span> 17<\/span> 47<\/span> 49<\/span> 75<\/span> de<\/span> 31<\/span> db<\/span> 89<\/span><\/div>\n
d8 <\/span>fe <\/span>c0 <\/span>cd<\/span> 80<\/span> 90<\/span> 90<\/span> e8<\/span> 9d<\/span> ff <\/span>ff <\/span>ff<\/span> 41<\/span> 41<\/span> 41<\/span> 41<\/span><\/div>\n
42<\/span> 42<\/span> 42<\/span> 42<\/span> 32<\/span> 00<\/span> 00<\/span> 00<\/span> 91<\/span> d8 <\/span>f1<\/span> 6d<\/span> 70<\/span> 20<\/span> 3a<\/span> ab<\/span><\/div>\n
67<\/span> 9a<\/span> 0b<\/span> c4<\/span> 91<\/span> fb <\/span>c7<\/span> 66<\/span> 0f<\/span> fc <\/span>cd <\/span>cc <\/span>b4<\/span> 02<\/span> fa <\/span>d7<\/span><\/div>\n
77<\/span> b4<\/span> 54<\/span> 38<\/span> ab<\/span> 1f<\/span> 0e<\/span> e3<\/span> 8e<\/span> d3<\/span> 0d<\/span> eb<\/span> 99<\/span> c3<\/span> 93<\/span> fe<\/span><\/div>\n
d1<\/span> 2b<\/span> 1b<\/span> 11<\/span> c6<\/span> 11<\/span> ef <\/span>c8 <\/span>ca<\/span> 2f<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

By embedding this payload into a small C program \u00a0and injecting a breakpoint at the exit(0) call by manually changing the \u201ccd\u201d in \u201ccd 80\u201d (int 0x80, the system call interrupt) to \u201ccc\u201d (int3) lets me read the decrypted string in a debugger.<\/p>\n

\n
<\/div>\n
\n\n\n\n
\n
\n
1<\/div>\n
2<\/div>\n
3<\/div>\n
4<\/div>\n
5<\/div>\n
6<\/div>\n
7<\/div>\n
8<\/div>\n
9<\/div>\n
10<\/div>\n<\/div>\n<\/td>\n
\n
\n
je<\/span>@<\/span>isis<\/span>:<\/span>~<\/span>$<\/span> gcc<\/span> –<\/span>o<\/span> x<\/span> x<\/span>.<\/span>c<\/span> –<\/span>m32<\/span>;<\/span> execstack<\/span> –<\/span>s<\/span> x<\/span><\/div>\n
je<\/span>@<\/span>isis<\/span>:<\/span>~<\/span>$<\/span> gdb<\/span> –<\/span>q<\/span> x<\/span><\/div>\n
Reading <\/span>symbols <\/span>from<\/span> \/<\/span>home<\/span>\/<\/span>je<\/span>\/<\/span>x<\/span>.<\/span>.<\/span>.<\/span>(<\/span>no <\/span>debugging <\/span>symbols <\/span>found<\/span>)<\/span>.<\/span>.<\/span>.<\/span>done<\/span>.<\/span><\/div>\n
(<\/span>gdb<\/span>)<\/span> r<\/span><\/div>\n
Starting <\/span>program<\/span>:<\/span> \/<\/span>home<\/span>\/<\/span>je<\/span>\/<\/span>x<\/span><\/div>\n
<\/div>\n
Program <\/span>received <\/span>signal <\/span>SIGTRAP<\/span>,<\/span> Trace<\/span>\/<\/span>breakpoint <\/span>trap<\/span>.<\/span><\/div>\n
0xffffd2b6<\/span> in<\/span> ?<\/span>?<\/span> (<\/span>)<\/span><\/div>\n
(<\/span>gdb<\/span>)<\/span> x<\/span>\/<\/span>s<\/span> $<\/span>edi<\/span>–<\/span>50<\/span><\/div>\n
0xffffd0da<\/span>:<\/span> “GET \/15b436de1f9107A3778aad525e5d0b20.js HTTP\/1.1”<\/span><\/div>\n<\/div>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n

This gives us the URL for the next stage of the challenge<\/p>\n","protected":false},"excerpt":{"rendered":"

I heard about \u201cthe code\u201d at www.canyoucrackit.co.uk during the first friday of december (2011-12-02), and cracked the final stage on sunday two days later. The reason for not cracking it all during friday evening was, unfortunately, not because it presented much of a challenge but because I was out partying pretty much 24\/7 during friday … Continue reading GCHQ Challenge Solution \u2013 Stage 1<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[2],"tags":[],"_links":{"self":[{"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/20"}],"collection":[{"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=20"}],"version-history":[{"count":1,"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/20\/revisions"}],"predecessor-version":[{"id":21,"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=\/wp\/v2\/posts\/20\/revisions\/21"}],"wp:attachment":[{"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=20"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=20"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/piratesecurityblog.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=20"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}