https://blog.dunham.io/ Recent content on Andrew Dunham's Blog Hugo -- gohugo.io en-us Copyright (c) 2012 - 2015, Andrew Dunham Fri, 08 Mar 2013 00:00:00 -0500 https://blog.dunham.io/post/password-cracking/ Fri, 08 Mar 2013 00:00:00 -0500 https://blog.dunham.io/post/password-cracking/ Introduction In one of my courses at McMaster University - Computer Networks and Security - the professor gave a challenge in class. The first person to crack a crypt() hash would get a 3% bonus on their final grade, and the first person to crack a md5crypt()-based hash would get a 7% bonus on their final grade. I cracked the crypt() password while the class was still going, by using John the Ripper and a decent wordlist that I had lying around on this server. https://blog.dunham.io/post/stripe-ctf/ Tue, 20 Mar 2012 20:28:17 -0500 https://blog.dunham.io/post/stripe-ctf/ So, a couple weeks back, I took part in the Stripe CTF. Now that they’ve released the VM images of the CTF, and their own example solutions (see here for the wrap-up, here for the code), I figured I’d write my own post-mortem. I managed to solve all 6 levels, even though I’m not entirely happy with the solution for the final level (level06). Below, you can find how I solved each level.