Hacking

Unfortunately, there has been a problem with the picture in task 2 - the version of the memory image that I uploaded does not contain the picture in a reasonably accessible format. It does, however, contain a screenshot. So ignore the description of the picture and describe the screenshot and how you obtained it. The information in the screenshot may confirm something you have already found out, but do not use it as a substitute for other memory analysis methods.

Hi all,

a big sorry from my side, but there has been a mixup in the encrypted message on Exercise 4. The binary data was mixed so that every two bytes were swapped. If you managed to extract the AES key but failed to decrypt the message from the sheet, try it again with the following data:

8feb0333433b0f660c8a7215e95eeecc
27e47a35d75c0eda16aa42e30752e407
50032f405358c7f0e07650480ad42795
0af6a7293a8e37515bad8a29b3f129af
54ee5ea350e880a74f3848371db88c72
6fffe3f2b437319815199d6eeab3c0b6
c2c6d80153d82cafba8c1933090504ad
10ca8c221dcef3fd2a8f40cae8d5b2e3
ca4f2d101a540514ca68cef6896e6ec1
4fec604ee5219124f815e59e359c785c
c321e6f70a8df9d534996dcf96812e60
665ffcd15e94983e82cdc62a40cd34a9

If your submission is correct up to the point where you decrypt the message, you will of course get full points.

Sorry for the mistake and see you tomorrow,
Frederik

If you have a Raspberry Pi 2 Model B at home, you can download the following image and solve Exercise 4 Part 1 yourself without any additional hardware. Copy the image to an SD card (min. 16 GB) and boot it.

https://hyperion.cispa.saarland/fred/hacking/pi2.image

Keep in mind that we cannot offer support for your own hardware. If the image doesn't work or you run into problems using it, it might be necessary to swap for one of the provided Raspberry Pi 3 Model B.

In case you break the operating system on the provided Raspberry Pi 3 Model B, you can use this image to restore the SD card (8 GB) to its original state.

https://hyperion.cispa.saarland/fred/hacking/pi3.image

The Cold Boot part of Exercise 4 is ready and the sheet will be released this weekend. As we announced on wednesday, you will be needing hardware for this exercise which we will of course provide. Each team can come by the office in E9 1, room 1.13 on monday and get one Raspberry Pi. As the software has yet to be copied to all devices, we suggest that you come after lunch. You may however try coming in the morning, if you're feeling lucky.

Sorry for the delay and have a nice weekend.

Frederik

Hi everybody,

there has been a request to give some hints on the Covert Channel task.

So I decided to give you three hints on the following dates:
6.9.2018: 15:30
7.9.2018: 15:30
8.9.2018: 15:30

So here is the first hint:
3 out of 4 channels are sending text as their payload

 

Cheers,
Joshua

Hi all (again),

the server for Exercise Sheet #1 is (or should be) fixed now. If you encounter any problems, write me an email. The server still runs on all 3 ports (1337, 1338, 1339), so if one doesn't work, you can try another.

Have a nice weekend and good luck with the exercises,
Frederik

P.S.: It wasn't explicitly written on the exercise sheet, but the service is for verification only. Please do not try to brute-force the passwords or dictionaries (I keep logs now!). All the information you need is on the exercise sheet and somewhere online. If you have problems, contact me with a (detailed) description of what you tried so far.

nc pulsar.die-sinlosen.de 1338
nc pulsar.die-sinlosen.de 1339

Hi all,

due to the troubles with the server for Exercise Sheet #1 I have set up two alternative connections. You can use

nc pulsar.die-sinlosen.de 1338
nc pulsar.die-sinlosen.de 1339

It seems that the server is only accessible by one team/person at a time. While I'm trying to sort this out, please be patient and try one of the alternatives or wait a few minutes if the connection hangs.

Sorry for the trouble
Frederik