diff --git a/src/content/writeups/amateursctf/2024/web/agile-rut.md b/src/content/writeups/amateursctf/2024/web/agile-rut.md index 3529eab..2059c88 100644 --- a/src/content/writeups/amateursctf/2024/web/agile-rut.md +++ b/src/content/writeups/amateursctf/2024/web/agile-rut.md @@ -3,7 +3,34 @@ title: "agile-rut" description: "check out this cool font i made!" points: 173 solves: 311 -author: nobody +author: Jozef Steinhübl +date: April 11 2024 --- -yeh' agile-rut.... it was hard lol +## Introduction + +![task](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut.png) + +There's a website with textarea and custom font. We have to inspect the font and find the flag. + +## Solution + +After downloading the font, we can drop it into [FontDrop](https://fontdrop.info/) to inspect it. In the `glyphs` tab, we can see a glyph with the very unusual name `lig.j.u.s.t.a.n.a.m.e.o.k.xxxxxxxxx.xxxx.x.xxxxxxxxxx.x.x.x.xxxxxxxxxx.xxx.xxxxxxxxxx.x.x.x.x.xxxxxxxxxx.x.x.x.x.xxxxxxxxxx.x.x.x.xxxxxxxxxx.x.x.x.x.x.xxxx.xxxxxxxxxx.xxxxx.xxxxx.xxxxx.xxxxxxxxxx`. + +![glyph](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut-glyph.png) + +![glyph info](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut-glyph-info.png) + +In an earlier version of the font the glyph was named `lig.a.m.a.t.e.u.r.s.C.T.F.braceleft.zero.k.underscore.b.u.t.underscore.one.underscore.d.o.n.t.underscore.l.i.k.e.underscore.t.h.e.underscore.j.b.m.o.n.zero.underscore.equal.equal.equal.braceright` which can be translated to `amateursCTF{0k_but_1_dont_like_the_jbmon0_===}`. It didn't work anyway. + +After inspecting using another service, called [GlyphrStudio](https://www.glyphrstudio.com/app/), we can see that there's a ligature with the same "icon". + +![glyphrstudio ligatures](https://raw.githubusercontent.com/GerlachSnezka/amateursctf/main/assets/2024-web-agile-rut-glyphrstudio-ligatures.png) + +![glyphrstudio ligature](2024-web-agile-rut-glyphrstudio-ligature.png) + +Using dev tools we can copy the ligature name and we'll get the flag: + +``` +amateursctf{0k_but_1_dont_like_the_jbmon0_===} +``` \ No newline at end of file diff --git a/writeups b/writeups index 2522789..57949ce 160000 --- a/writeups +++ b/writeups @@ -1 +1 @@ -Subproject commit 2522789009a39530f0cbc6dd576722d6e6cb26aa +Subproject commit 57949cee34a49a1e4412c4080b360875dd5dbed0