Skip to content

Commit

Permalink
Update writeups 🚀
Browse files Browse the repository at this point in the history
  • Loading branch information
github-actions[bot] committed Apr 11, 2024
1 parent aa7e5fa commit 440a59a
Show file tree
Hide file tree
Showing 2 changed files with 30 additions and 3 deletions.
31 changes: 29 additions & 2 deletions src/content/writeups/amateursctf/2024/web/agile-rut.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,34 @@ title: "agile-rut"
description: "check out this cool font i made!"
points: 173
solves: 311
author: nobody
author: Jozef Steinhübl
date: April 11 2024
---

yeh' agile-rut.... it was hard lol
## Introduction

![task](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut.png)

There's a website with textarea and custom font. We have to inspect the font and find the flag.

## Solution

After downloading the font, we can drop it into [FontDrop](https://fontdrop.info/) to inspect it. In the `glyphs` tab, we can see a glyph with the very unusual name `lig.j.u.s.t.a.n.a.m.e.o.k.xxxxxxxxx.xxxx.x.xxxxxxxxxx.x.x.x.xxxxxxxxxx.xxx.xxxxxxxxxx.x.x.x.x.xxxxxxxxxx.x.x.x.x.xxxxxxxxxx.x.x.x.xxxxxxxxxx.x.x.x.x.x.xxxx.xxxxxxxxxx.xxxxx.xxxxx.xxxxx.xxxxxxxxxx`.

![glyph](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut-glyph.png)

![glyph info](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut-glyph-info.png)

In an earlier version of the font the glyph was named `lig.a.m.a.t.e.u.r.s.C.T.F.braceleft.zero.k.underscore.b.u.t.underscore.one.underscore.d.o.n.t.underscore.l.i.k.e.underscore.t.h.e.underscore.j.b.m.o.n.zero.underscore.equal.equal.equal.braceright` which can be translated to `amateursCTF{0k_but_1_dont_like_the_jbmon0_===}`. It didn't work anyway.

After inspecting using another service, called [GlyphrStudio](https://www.glyphrstudio.com/app/), we can see that there's a ligature with the same "icon".

![glyphrstudio ligatures](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut-glyphrstudio-ligatures.png)

![glyphrstudio ligature](2024-web-agile-rut-glyphrstudio-ligature.png)

Using dev tools we can copy the ligature name and we'll get the flag:

```
amateursctf{0k_but_1_dont_like_the_jbmon0_===}
```
2 changes: 1 addition & 1 deletion writeups
Submodule writeups updated 1 files
+1 −1 amateursctf

0 comments on commit 440a59a

Please sign in to comment.