Skip to content

My quick and dirty solution to Filestore - Google CTF 2021

Notifications You must be signed in to change notification settings

Coldtrain/Filestore-Google-CTF-2021

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Filestore Google CTF 2021

My quick and dirty solution to Filestore, Life has kept me busy so I didn't get a chance to do this writeup, maybe soon.

Code written during the 2021 Google CTF.

Deduplication is the process of storing large amounts of data but removing duplicates / repeating data while having all copies point to one index; By doing so allows databases and backup solutions to save on immense amounts of storage space.

The exploit in this CTF is that deduplication is its own worst enemy.

Google gives you a "file storage" service which you can access through netcat.

filestore

However once playing around with it you will notice storage size increases only when entering non matching characters.

Both python scripts connect to the Google CTF Python TCP socket server using PwnTools, this is a much simpler and more efficient alternative then using python sockets to send and recieve TCP buffers. (you do not need to specify the TCP buffer size you are waiting for etc.)

PwnTools is an advanced Python library for writing exploits and payloads.

The first python script valid.py loops through all ascii letters one by one and closes the connection to the server, each character which did not increase storage size was already stored by admin. simple.

once it returns all found characters I take this output and store it into a ValidChars Array inside of solver.py

This python script essentially loops repeating the same process but inserting a new character from the validChars Array to the start of the Flag string until the entire flag is leaked. (each loop it is checking the bytes stored.)

About

My quick and dirty solution to Filestore - Google CTF 2021

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages