Challenges

• Baller (Forens)
• Nerd Emoji (Crypto)
• Serpent (Rev)
• Baby Keygen (Rev)
• Malware Analysis (Misc)

Baller

Solved with Jacky

We can use binwalk -e baller.zip (i have version 3.1.0) to find:

We later get a gif file, which we can open up:

We wrap it in the flag and get CIT{im_balling_fr}

Nerd Emoji

Solved with Bentley

This is a substitution cipher. We can use this website to find the flag: https://www.guballa.de/substitution-solver

Serpent

This is a simple deobfuscation challenge.

Once you replace a few variable names, you find that they will all run to form a single flag string, that is not being printed.

So, we print out the flag, and we get:

CIT{7777aKMpU9X3TqnD}

Baby Keygen

1. The input length must be length 16
2. The first 4 characters must be KEY_
3. After we run the program 16 times, the program will print the flag CIT{41jN8BKzz388}

Malware Analysis

Just toss the file into virustotal and you get a file signature