In the dark of night, a flying saucer hovers over a town in the distance while a shadowy figure looks on.

Antisyphon Cyber Range: The Truth is Out There!

Posted on By

Hey everybody!

If you had the chance to attend WWHF in Deadwood, SD, last week, you already know that the Truth is Out There! To help bring that reality home, this week’s challenges are all about cryptography. Can you find the hidden truths in these challenges?

For screenshots and descriptions of this week’s additions, see below.

Good luck and have fun!
The Cyber Range Team

In the dark of night, a flying saucer hovers over a town in the distance while a shadowy figure looks on.
The Truth is Out There

P.S. If you’re not already signed up for the BHIS Antisyphon Cyber Range, the following page has screenshots, info, and, of course, a link where you can sign up and join in the fun:

https://www.antisyphontraining.com/cyber-range/

I asked a 6th grader about what she thought a big number was, and she said 100 million. Unfortunately, even 100 million isn't a big enough of a number for secure RSA communications. Given a public key and ciphertext can you decrypt these numbers (that are rather close to 100 million) into a flag?
Math and Python… What could go wrong?
A couple days ago, we got initial access into THEBOSS' network using a rubber ducky on an unlocked workstation. However, THEBOSS is using some next-gen EDR which is making our Red Team engagement pretty challenging! We tried keylogging, dumping password/hashes, looking for cleartext credentials... but no luck. Fortunately, we've captured network traffic from the user's workstation. Hopefully we can get some kind of password or hash, so we can continue this difficult Red Team. Can you get us the user's password?
I wonder what’s the most popular word list out there?
We found this outlaw who doesn't want to give up any of her associates. Fortunately, we managed to collect a file from her personal computer she left behind in her getaway car. We think it is encrypted, though. Do you think you can help decrypt the contents? Being an outlaw, I would have to guess she's using a password with a wild-west theme. We know she was born in 1989, too. I hope that helps.
Who knew that cowboys can hack, too?
One of the weaknesses of pseudo-random generators (pRNGs) is that, if an adversary somehow manages to obtain the seed, then they can predict the random values that are generated by the generator. Therefore, I have invented a new type of pRNG: One that doesn't allow the adversary to guess the randomly generated values even if they know what the seed is! Wanna try it out to see if it's secure?
Making a pseudo-random generator (pRNG) might be better left to the professionals…

Cyber Range Updates, News Tags:, ,