Hi everybody! Welcome to the last meeting of 2017: the briefing BabyCTF, to warm up.

We propose you a set of challenges that you can try to hack during the holidays: this is our Christmas present for you ;-)

We anticipate your question (“How can I participate?”) and we suggest you these steps:

1) solve the challenges (see below) and collect the flags / passwords;

2) go to Aulaweb, enroll in Boeing-Unige Scholarship Project Course;

3) find the questionnaire named “Carica qui le tue flag”;

4) fill the blanks!

Notice that you have only one shot! Once you have confirmed the questionnaire, you can’t do it again! If you are not sure or you haven’t finished yet, you can save your intermediate results and continue later.

Be aware that the questionnaire will close on 23:59 of Thursday, 10th 2018.

It’s time to hack this holiday away ;-)

Merry Xmas!

• Find Date chall #1 (MISC, 3 pts)
• Find Date chall #2 (MISC, 3 pts)
• Old School Login chall #3(WEBSEC, 5 pts)
• Browser Fingerprinting chall #4 (WEBSEC, 5 pts)
• Blacklist Bypass chall #5 (WEBSEC, 5 pts)
• Talk to server on webdev.dibris.unige.it at port 8081 chall #6 (MISC, 8 pts)
• Binary Reversing chall #7 (BINARY, 5 pts)
• Binary Reversing chall #8 (BINARY, 7 pts)
• Binary Reversing chall #9 (BINARY, 9 pts)