https://github.com/teamteamdev/ugractf-2024-quals

Pwn:

Decode it:

https://i.imgflip.com/8fbms7.jpg

PWN 200

— Looks like our task set is rather disbalanced. We’ve got a hard pwn, but nothing simpler… That’s a bummer.

— Nevermind, I’ll fix that in a sec.

[urldecode](<https://q.2024.ugractf.ru/tasks/urldecode/attachments/urldecode>)

nc urldecode.q.2024.ugractf.ru 9279
Token: o3iaw5hpw238iheh

Challenge by [rozetkinrobot](<https://t.me/rozetkinrobot>).

urldecode.zip

File system:

PWN 400

callidus77: This reminds me of a story. Technicians were connecting a subscriber to our network. They plugged in the network card, but he was using FreeBSD with no matching drivers installed. They scratched their heads and left. The subscriber finally manages to connect after three weeks.

They say: “Took you long to find the drivers.”

He replies: “I wasn’t searching. I wrote them myself.”

(c) Russian Bash.org

nc vfs.q.2024.ugractf.ru 9278
Token: ccux4jwoq2r0mqid

Challenge by [purplesyringa](<https://t.me/purplesyringa>).
/$ help
Supported commands:
help                            Print this help
exit                            Quit session
resys                           Reset filesystem to backup
cd <path>                       Change working directory
ls [<path>]                     List files in directory
cat <path>                      Print file contents
stat <path>                     Print file metadata
find [<path>]                   Recursively list directory
grep <str> <path>               Search files for substring
write <path> <data>             Overwrite file with hex data
mkdir <path>                    Create directory
unlink <path>                   Delete file/directory
df                              Show free space
whoami                          Show current user
home/purplesyringa$ ls
Type  UID  Your perms  Public perms  Filename
file  129  r-          r-            sticker.webp
file  129  --          --            flag.txt
dir   129  r-          r-            vfs
/home/purplesyringa$ cd vfs
/home/purplesyringa/vfs$ ls
Type  UID  Your perms  Public perms  Filename
file  129  r-          r-            main.rs
file  129  r-          r-            vfs

main.rs

Web:

Wicket gate:

WEB 100

Come on in!

[<https://wicketgate.q.2024.ugractf.ru/cd7e0wnv3868x4f2>](<https://wicketgate.q.2024.ugractf.ru/cd7e0wnv3868x4f2>)

Challenge by [baksist](<https://t.me/baksist>).

Language barrier:

WEB 150

We’ve asked our junior dev to implement localization of a website, but there was no time or people to test it. Can you take a look?

[<https://worldwide.q.2024.ugractf.ru/64c44f267b1a6105/>](<https://worldwide.q.2024.ugractf.ru/64c44f267b1a6105/>)

Challenge by [baksist](<https://t.me/baksist>).