We are in desperate need of a translator who understands the languages of varoius Indian tribes. We already know how to speak to the Apache tribe via HTTP but we have some stuff missing. We offer 5$ per successfully translated language.
(That means you can send us 7 solutions to this challenge and will receive 5 points for each.)SMTP
GOPHER
POP3
FINGER
TFTP
IRC
NNTP
Okay. Pretty easy. We must connect to default ports of these services and try to see something interesting :)
S – server, C – client, T – telnet
SMTP
➜ ~ telnet wildwildweb.fluxfingers.net 25 T: Trying 149.13.33.84... T: Connected to wildwildweb.fluxfingers.net. T: Escape character is '^]'. S: 220 protocols FluxSMTPd (send a mail to our team's mail address) C: HELO fluxmail S: 250 protocols C: MAIL FROM: <me@akaminsky.net> S: 250 OK C: RCPT TO:<fluxfingers@ruhr-uni-bochum.de> S: 250 OK C: DATA S: 354 End data with <CR><LF>.<CR><LF> C: from: me@akaminsky.net C: subject: gimme the flag C: C: Hi! C: Gimme the flag plz ;) C: . S: 200 flag{deliver_that_yourself_:-P}
GOPHER
➜ ~ telnet wildwildweb.fluxfingers.net 70 T: Trying 149.13.33.84... T: Connected to wildwildweb.fluxfingers.net. T: Escape character is '^]'. C: S: 0flag.txt 0 wildwildweb.fluxfingers.net 70 S: . T: Connection closed by foreign host. ➜ ~ telnet wildwildweb.fluxfingers.net 70 T: Trying 149.13.33.84... T: Connected to wildwildweb.fluxfingers.net. T: Escape character is '^]'. C: 0 S: flag{ever_heard_of_g0pher?} T: Connection closed by foreign host.
POP3
➜ ~ telnet wildwildweb.fluxfingers.net pop3 T: Trying 149.13.33.84... T: Connected to wildwildweb.fluxfingers.net. T: Escape character is '^]'. S: +OK POP3 server ready (USER: flux, PASS: flux) C: USER flux S: +OK C: PASS flux S: +OK howdy C: LIST S: +OK 3 messages (57 octets) S: 0d 9 S: 1d 39 S: 2d 9 S: . C: RETR 0 S: +OK 9 octets S: S: Message 1 S: . C: RETR 1 S: +OK 39 octets S: S: Message 2 flag{once_pop3d_never_stop3d} T: Connection closed by foreign host.
FINGER
➜ ~ telnet wildwildweb.fluxfingers.net finger T: Trying 149.13.33.84... T: Connected to wildwildweb.fluxfingers.net. T: Escape character is '^]'. C: S: Login Name TTY Idle When Office S: dan Dan Daninsky p1 1m 12:00 lu S: r00t r00t McR00ty p0 13:37 lu T: Connection closed by foreign host. ➜ Shared telnet wildwildweb.fluxfingers.net finger R: Trying 149.13.33.84... R: Connected to wildwildweb.fluxfingers.net. R: Escape character is '^]'. C: r00t S: Login name: r00t In real life: r00t McR00ty S: Office: Luxembourg Home phone: foo-1337 S: Directory: /r00t Shell: /bin/1337shell S: Plan: flag{f1nger_me_baby...scnr} T: Connection closed by foreign host.
TFTP
➜ ~ tftp wildwildweb.fluxfingers.net tftp> get flag Received 1230 bytes in 2.4 seconds tftp> ➜ ~ cat flag EXT. A JAIL IN MEXICO - DAY It's an early Friday morning and a patrol car drives up an unpaved road and parks next to a gutted police car on cinder blocks. The camera pans with the OFFICER as he exits his car and walks up to a ramp leading to the babay blue JAIL HOUSE. He is carrying a greasy bag of fast food. INT. JAIL LOBBY - DAY The Officer enters the lobby, tosses the bag of food to his PARTNER who is sitting at a desk. He grabs a tin cup and walks over to barred entrance to Block A. Twenty or so CRIMINALS, from drunks to drug dealers are sleeping peacefully in their cell on Block A. The Officer rattles the tin cup between the entrance bar. INT. JAIL CELLS - DAY The inmates stir, rubbing their dirty faces and trying to sit up. The camera dollies slowly down the narrow hallway of the block which has three cells: Two small ones side by side, and one bigger cell that faces the block entrance. The sound of scribbling and business dealing can be heard from inside the cell. It is AZUL jottin ginto a business ledger while chatting on his cellular phone. His cell is equipped with a small desk and a refridgerator. He hangs up the phone and continues writing. flag{tftp_as_a_service}
IRC
➜ ~ nc wildwildweb.fluxfingers.net 6667 C: PASS * C: NICK MyNicklol C: USER MyUsername 8 r r S: :wildwildweb.fluxfingers.net 001 MyNicklol :Hi, welcome to IRC S: :wildwildweb.fluxfingers.net 002 MyNicklol :Your host is wildwildweb.fluxfingers.net S: :wildwildweb.fluxfingers.net 251 MyNicklol :6 clients connected right now S: :wildwildweb.fluxfingers.net 422 MyNicklol :MOTD not set C: LIST S: :wildwildweb.fluxfingers.net 322 MyNicklol #flagchannel 1 :Obtain the flag here S: :wildwildweb.fluxfingers.net 323 MyNicklol :End of LIST C: JOIN #flagchannel S: :MyNicklol!MyUsername@127.0.0.1 JOIN #flagchannel S: :wildwildweb.fluxfingers.net 331 MyNicklol #flagchannel :Obtain the flag here S: :wildwildweb.fluxfingers.net 353 MyNicklol = #flagchannel :MyNicklol flagbot S: :wildwildweb.fluxfingers.net 366 MyNicklol #flagchannel :End of NAMES listS S: :flagbot!flagbot@127.0.0.1 PRIVMSG MyNicklol :The flag is flag{internetrelaaaaaychat}
NNTP
➜ ~ nc wildwildweb.fluxfingers.net 119 S: 200 flux news server ready C: LIST S: 215 list of newsgroups follows S: apache.chitchat 0 1 n S: justhopi.things 0 1 n S: . C: GROUP apache.chitchat S: 211 2 0 1 apache.chitchat group selected C: ARTICLE 0 S: 220 0 <1291@apache.FLUX> article retrieved S: Message-ID: <1291@apache.FLUX> S: S: Dánt’e? S: . C: ARTICLE 1 S: 220 1 <1292@apache.FLUX> article retrieved S: Message-ID: <1292@apache.FLUX> S: S: Ta na á née see. flag{Not_aNother_sTupid_Protocol}
Leave a Reply