https://corneliusreetz.com/ Recent content in Home on Cornelius Reetz Hugo -- gohugo.io en-gb Wed, 11 Oct 2023 00:00:00 +0000 https://corneliusreetz.com/posts/blockchain/htb/honor-among-thieves/ Wed, 11 Oct 2023 00:00:00 +0000 https://corneliusreetz.com/posts/blockchain/htb/honor-among-thieves/ The Contracts: Setup.sol: // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; import {Rivals} from "./Rivals.sol"; contract Setup { Rivals public immutable TARGET; constructor(bytes32 _encryptedFlag, bytes32 _hashed) payable { TARGET = new Rivals(_encryptedFlag, _hashed); } function isSolved(address _player) public view returns (bool) { return TARGET.solver() == _player; } } Rivals.sol: // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; contract Rivals { event Voice(uint256 indexed severity); bytes32 private encryptedFlag; bytes32 private hashedFlag; address public solver; constructor(bytes32 _encrypted, bytes32 _hashed) { encryptedFlag = _encrypted; hashedFlag = _hashed; } function talk(bytes32 _key) external { bytes32 _flag = _key ^ encryptedFlag; if (keccak256(abi. https://corneliusreetz.com/posts/blockchain/htb/token-to-wonderland/ Thu, 05 Oct 2023 00:00:00 +0000 https://corneliusreetz.com/posts/blockchain/htb/token-to-wonderland/ The Contracts They're long, so they're in this dropdown. Setup.sol // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.7.0; import {SilverCoin} from "./SilverCoin.sol"; import {Shop} from "./Shop.sol"; contract Setup { Shop public immutable TARGET; constructor(address _player) payable { require(msg.value == 1 ether); SilverCoin silverCoin = new SilverCoin(); silverCoin.transfer(_player, 100); TARGET = new Shop(address(silverCoin)); } function isSolved(address _player) public view returns (bool) { (,, address ownerOfKey) = TARGET.viewItem(2); return ownerOfKey == _player; } } Shop. https://corneliusreetz.com/posts/blockchain/htb/magic-vault/ Mon, 02 Oct 2023 00:00:00 +0000 https://corneliusreetz.com/posts/blockchain/htb/magic-vault/ The contracts: Setup.sol // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; import {Vault} from "./Vault.sol"; contract Setup { Vault public immutable TARGET; constructor() payable { require(msg.value == 1 ether); TARGET = new Vault(); } function isSolved() public view returns (bool) { return TARGET.mapHolder() != address(TARGET); } } Vault.sol // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; contract Vault { struct Map { address holder; } Map map; address public owner; bytes32 private passphrase; uint256 public nonce; bool public isUnlocked; constructor() { owner = msg. https://corneliusreetz.com/posts/blockchain/htb/distract-and-destroy/ Wed, 27 Sep 2023 00:00:00 +0000 https://corneliusreetz.com/posts/blockchain/htb/distract-and-destroy/ The Contracts: Setup.sol: // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; import {Creature} from "./Creature.sol"; contract Setup { Creature public immutable TARGET; constructor() payable { require(msg.value == 1 ether); TARGET = new Creature{value: 10}(); } function isSolved() public view returns (bool) { return address(TARGET).balance == 0; } } Creature.sol: // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; contract Creature { uint256 public lifePoints; address public aggro; constructor() payable { lifePoints = 1000; } function attack(uint256 _damage) external { if (aggro == address(0)) { aggro = msg. https://corneliusreetz.com/posts/blockchain/htb/survival-of-the-fittest/ Wed, 27 Sep 2023 00:00:00 +0000 https://corneliusreetz.com/posts/blockchain/htb/survival-of-the-fittest/ Getting Started: Start off by deploying the contract, then go to the $IP/connection_info to find your PrivateKey (PK) and the RPC URL you need to connect to, also download the contract details from the HTB page. The contracts: We’re supplied with 2 different contracts, first one being Setup.sol which contains the following code: // SPDX-License-Identifier: UNLICENSED pragma solidity ^0.8.13; import {Creature} from "./Creature.sol"; contract Setup { Creature public immutable TARGET; constructor() payable { require(msg. https://corneliusreetz.com/pages/about/ Mon, 01 Jan 0001 00:00:00 +0000 https://corneliusreetz.com/pages/about/ Currently studying Chemistry and Technology at the Technical University of Denmark (DTU). I am interested in a broad range of topics, including but not limited to: Chemistry Automation Programming Hacking On the “blog”, I’ll publish some of my projects, write-ups of CTF and challenges, and other stuff I find interesting. For more of my writeups, visit https://raijin.dk