HeroCTF_v5 Unique Commit

Blockchain/Classic_One_tbh/challenge.yml

@@ -0,0 +1,33 @@
+name: "Challenge 01 : Classic one tbh"
+author: "iHuggsy"
+category: Blockchain
+description: "All the Blockchain challenges descriptions and relevant informations are available on<br>
+<a>http://blockchain.heroctf.fr:22000/</a><br><br>
+
+Format : **Hero{FLAG}**
+Author : **iHuggsy**
+"
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "Hero{S4m3_aS_USU4L_bUT_S3eN_IRL??!}",
+        data: "case_insensitive",
+    }
+
+tags:
+    - easy 
+    - Blockchain
+
+state: visible
+version: "0.1"

Blockchain/Dive_IRL_Stuff/challenge.yml

@@ -0,0 +1,33 @@
+name: "Challenge 02 : Dive into real life stuff"
+author: "iHuggsy"
+category: Blockchain
+description: "All the Blockchain challenges descriptions and relevant informations are available on<br>
+<a>http://blockchain.heroctf.fr:22000/</a><br><br>
+
+Format : **Hero{FLAG}**
+Author : **iHuggsy**
+"
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "Hero{Th1s_1_w4s_3z_bro}",
+        data: "case_insensitive",
+    }
+
+tags:
+    - medium 
+    - Blockchain
+
+state: visible
+version: "0.1"

Blockchain/Now_This_is_Real_Life/challenge.yml

@@ -0,0 +1,33 @@
+name: "Challenge 04 : Now this is real life"
+author: "iHuggsy"
+category: Blockchain
+description: "All the Blockchain challenges descriptions and relevant informations are available on<br>
+<a>http://blockchain.heroctf.fr:22000/</a><br><br>
+
+Format : **Hero{FLAG}**
+Author : **iHuggsy**
+"
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "Hero{S0_Ur_4_r3AL_hUnT3r_WP_YMI!!!}",
+        data: "case_insensitive",
+    }
+
+tags:
+    - hard 
+    - Blockchain
+
+state: visible
+version: "0.1"

Blockchain/Oh_sh_here_we_go_again/challenge.yml

@@ -0,0 +1,33 @@
+name: "Challenge 00 : Oh sh. Here we go again ?"
+author: "iHuggsy"
+category: Blockchain
+description: "All the Blockchain challenges descriptions and relevant informations are available on<br>
+<a>http://blockchain.heroctf.fr:22000/</a><br><br>
+
+Format : **Hero{FLAG}**
+Author : **iHuggsy**
+"
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "Hero{M3l_weLComes_U_B4cK!:)}",
+        data: "case_insensitive",
+    }
+
+tags:
+    - easy 
+    - Blockchain
+
+state: visible
+version: "0.1"

Blockchain/The_Arrest/challenge.yml

@@ -0,0 +1,41 @@
+name: "The arrest"
+author: "iHuggsy"
+category: Blockchain
+description: "In the dim-lit confines of his room, a lone figure hunched over a computer screen. Known online as 'Swissy', he was one of the most notorious ransomware operators worldwide.<br>
+From his small apartment in a forgotten corner of Moscow, Swissy had wreaked havoc on the digital world, crippling entire industries with his ransomware attacks. <br>
+But tonight, his reign of terror ended abruptly. A sudden knock echoed through the room, followed by the splintering of the door as Russian FSB agents stormed in. <br>
+Swissy was arrested, but the real challenge was only beginning - tracing the syndicate behind him.<br>
+Find the address who funded the ransomware operator (0xf6c0513FA09189Bf08e1329E44A86dC85a37c176)<br><br>
+
+
+**NOTE : Relevant contracts and addresses can be found in the help section on the blockchain website at the help page**<br><br>
+
+Format : **0x..** (ETH address)
+Author : **iHuggsy**
+"
+
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "0x54741632BE9F6E805b64c3B31f3e052e1eAe73e2",
+        data: "case_insensitive",
+    }
+
+tags:
+    - easy 
+    - OSINT
+    - Blockchain
+
+state: visible
+version: "0.1"

Blockchain/The_Second_Transaction_and_the_Offshore_Connection/challenge.yml

@@ -0,0 +1,45 @@
+name: "The Second Transaction and the Offshore Connection"
+author: "iHuggsy"
+category: Blockchain
+description: "The second transaction led to an offshore exchange account in Switzerland, further complicating matters.<br> 
+After weeks of negotiations, they managed to obtain the identity of the account holder, a businessman based in Shanghai. 
+They were one step closer, but still far from the truth.
+Follow the trail. Find the address who funded the the exchange's account (last step's flag)<br><br>
+
+
+**NOTE : Relevant contracts and addresses can be found in the help section on the blockchain website at the help page**<br><br>
+
+
+Format : **0x..** (ETH address)
+Author : **iHuggsy**
+"
+
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "0x80AF38eCD0dE67B02552A558cFD144a38D544160",
+        data: "case_insensitive",
+    }
+
+tags:
+    - hard 
+    - OSINT
+    - Blockchain
+
+requirements:
+    - "The Arrest"
+    - "Tracing the First Transaction"
+
+state: visible
+version: "0.1"

Blockchain/The_Third_Transaction_and_the_Insider/challenge.yml

@@ -0,0 +1,47 @@
+name: "The Third Transaction and the Insider"
+author: "iHuggsy"
+category: Blockchain
+description: "The third transaction was the most challenging yet. We have no clue who this belongs to ... <br>
+You have to keep following the trail. The end is near ! <br>
+
+The address that funded the unknown wallet address should lead to a CEX wallet transfer.<br>
+Find the hash of the transaction from the CEX to the main funding address<br><br>
+
+
+**NOTE : Relevant contracts and addresses can be found in the help section on the blockchain website at the help page**<br><br>
+
+
+Format : **0x..** (sha3 hash)
+Author : **iHuggsy**
+"
+
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "0x10110b38d8552bf2d47c958a201da2aa4d184f87cf8a6ef3f5dc57ef9c18162a",
+        data: "case_insensitive",
+    }
+
+tags:
+    - hard 
+    - OSINT
+    - Blockchain
+
+requirements:
+    - "The Arrest"
+    - "Tracing the First Transaction"
+    - "The Second Transaction and the Offshore Connection"
+
+state: visible
+version: "0.1"

Blockchain/Tracing_the_First_Transaction/challenge.yml

@@ -0,0 +1,44 @@
+name: "Tracing the First Transaction"
+author: "iHuggsy"
+category: Blockchain
+description: "The first transaction was the most straightforward, traced back to a bitcoin wallet belonging to a shell company. <br>
+The company was a front, but it was a start. They discovered the shell company was registered in the Cayman Islands - <br>
+a notorious tax haven, making it a perfect place to launder illicit fund <br>
+Follow the trail. Find the address who funded the the shell company (last step's flag)<br><br>
+
+
+**NOTE : Relevant contracts and addresses can be found in the help section on the blockchain website at the help page**<br><br>
+
+
+Format : **0x..** (ETH address)
+Author : **iHuggsy**
+"
+
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "0x26F8A2D63B06D84121b35990ce8b7FEbac4Fe353",
+        data: "case_insensitive",
+    }
+
+tags:
+    - medium 
+    - OSINT
+    - Blockchain
+
+requirements:
+    - The arrest
+
+state: visible
+version: "0.1"

Blockchain/You_Have_to_be_Kidding_me/challenge.yml

@@ -0,0 +1,33 @@
+name: "Challenge 03 : You have to be kidding me.."
+author: "iHuggsy"
+category: Blockchain
+description: "All the Blockchain challenges descriptions and relevant informations are available on<br>
+<a>http://blockchain.heroctf.fr:22000/</a><br><br>
+
+Format : **Hero{FLAG}**
+Author : **iHuggsy**
+"
+value: 0
+type: dynamic
+
+extra:
+    initial: 500
+    decay: 100
+    minimum: 50
+
+image: null
+host: null
+
+flags:
+    - {
+        type: "static",
+        content: "Hero{H0w_L0ng_D1d_1t_T4k3_U_?..lmao}",
+        data: "case_insensitive",
+    }
+
+tags:
+    - hard 
+    - Blockchain
+
+state: visible
+version: "0.1"

Crypto/Futile/Dockerfile

@@ -0,0 +1,13 @@
+FROM python:3.11-slim-bullseye
+
+RUN apt update -y && apt install -y socat \
+	&& adduser --disabled-password --home /app user \
+	&& pip3 install pylfsr
+
+COPY --chown=user . /app
+
+RUN chmod 755 /app/entry.sh /app/chall.py
+
+EXPOSE ${LISTEN_PORT}
+
+ENTRYPOINT ["/app/entry.sh"]