VoorivexChallenge

KO | EN

gitlite — search

#javascript #ai #llm #go #rust #deep-learning #linux #nodejs #java #windows #vue #pytorch #ios #open-source

VoorivexChallenge

(★ 13)

This is a writeup about challenges in voorivex challenge (Berserk vs Zodd)

VoorivexChallenge 최신버젼 다운로드

최종 버전 다운로드 (.zip)

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# VoorivexChallenge - Zodd
This is a writeup about all levels in voorivex challenge (Berserk vs Zodd)

### Level 1
```
change the url to https://z.voorivex.academy/level-2
```
### Level 2
```
change the url to https://z.voorivex.academy/level%203
```
### Level 3
```
1.Find the location of "off.png"
2.Go to this url : https://z.voorivex.academy/level%203/assets/png/off.png
3.Change "off.png" to "on.png"
4.You will find "/f2cerd3x" then go to : https://z.voorivex.academy/F2CERD3X/
```
### Level 4
```
1.Use "view-source:" like this : view-source:https://z.voorivex.academy/F2CERD3X to see the source
2.You will find "/pfKL0e9_" then go to : https://z.voorivex.academy/pfKL0e9_/
```
### Level 5
```
1.Go to this path : https://z.voorivex.academy/pfKL0e9_/assets/png/
2.You will find "fixed.png" url click on it and then go to "https://z.voorivex.academy/Ux0_221R/"
```
### Level 6
```
1.Curl like this : curl -v -H "User-Agent: Mozilla/5.0 (Linux; Android 12; SM-S906N Build/QP1A.190711.020; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/80.0.3987.119 Mobile Safari/537.36" https://z.voorivex.academy/Ux0_221R/
2.You will recieve the "/cLps09-o" , then go to https://z.voorivex.academy/cLps09-o/
```
### Level 7
```
1.Curl like this : curl -v -H "User-Agent: GPLUS" https://z.voorivex.academy/cLps09-o/
2.You will recieve the "/GhopI-o1" , then go to https://z.voorivex.academy/GhopI-o1/
```
### Level 8
```
1.Curl like this : curl https://z.voorivex.academy/GhopI-o1/ -H "referer: https://google.com"
2.You will recieve the "/IkLmOpmN" , then go to https://z.voorivex.academy/IkLmOpmN/
```
### Level 9
```
1.Curl like this : curl https://z.voorivex.academy/IkLmOpmN/ -H "referer: nowhere"
2.You will recieve the "/PbDXzQW8" , then go to https://z.voorivex.academy/PbDXzQW8/
```
### Level 10
```
1.Curl like this : curl https://z.voorivex.academy/PbDXzQW8/ -X POST
2.You will recieve the "/kLmn6GHn" , then go to https://z.voorivex.academy/kLmn6GHn/
```
### Level 11
```
1.Curl like this : curl https://z.voorivex.academy/kLmn6GHn/ -X DELETE
2.You will recieve the "/mn7LMcv3" , then go to https://z.voorivex.academy/mn7LMcv3/
```
### Level 12
```
1.Curl like this : curl https://z.voorivex.academy/mn7LMcv3/?SuperSecret
2.You will recieve the "/mvfnINC5" , then go to https://z.voorivex.academy/mvfnINC5/
```
### Level 13
```
1.Curl like this : curl https://z.voorivex.academy/mvfnINC5/ -X POST -d "letter=hi"
2.You will recieve the "/xuIdnc84" , then go to https://z.voorivex.academy/xuIdnc84/
```
### Level 14
```
1.Curl like this : url https://z.voorivex.academy/xuIdnc84/ -X POST -d "enabled=true"
2.You will recieve the "/vmjINDl9" , then go to https://z.voorivex.academy/vmjINDl9/
```
### Level 15
```
1.View source page you will find letters
2.Assemble them and you get "/xkl1m8tX"
3.Put the above string into "decode" function embedded in the page scripts tag
4.You will get "wjk0l7sW" , then go to https://z.voorivex.academy/wjk0l7sW/
```
### Level 16
```
1.Page is using xhr and sends xhr.send()
2.Call in the browser console : "xhr.response"
3.You will get "/fvjotg9C" , then go to https://z.voorivex.academy/fvjotg9C/
```
### Level 17
```
1.Dig like this : "dig z.voorivex.academy any"  or "dig z.voorivex.academy txt"
2.You will get "/4080b6d4/" then go to https://z.voorivex.academy/4080b6d4/
```
### Level 18
```
1.Go to redrum69 image location
2.Reverse the file name "redrum69"
3.It will be "96murder" , then go to https://z.voorivex.academy/96murder
```
### Level 19
```
1.Curl like this : curl https://z.voorivex.academy/96murder/ -I
2.You will get "/fibLPc23" , then go to https://z.voorivex.academy/fibLPc23/
```
### Level 20
```
1.This url in burp: https://z.voorivex.academy/fibLPc23/ is redirected to https://z.voorivex.academy/f1bLPc23/
and in this redirection (302) you can see the path "/ioOvLC23"
2.Then go to https://z.voorivex.academy/ioOvLC23/
```
### Level 21
```
1.Curl like this : curl https://z.voorivex.academy/ioOvLC23/ -H "Cookie: Chocolate"
2.You will get "/tigth32x" , then go to https://z.voorivex.academy/tigth32x
```
### Level 22
```
1.Curl like this : curl https://z.voorivex.academy/tigth32x/ -I, you will see "set-cookie" header
2.Curl like this : curl https://z.voorivex.academy/tigth32x/ -H "Cookie: auth=1"
3.You will get "/lhnkOVv7" , then go to https://z.voorivex.academy/lhnkOVv7/
```
### Level 23
```
1.Curl like this : curl https://z.voorivex.academy/lhnkOVv7/ -I, you will see "set-cookie" header in base64
2.Curl like this : curl https://z.voorivex.academy/lhnkOVv7/ -H "Cookie: auth=MQ%3D%3D"
3.You will get "/iyhjPCc2" , then go to https://z.voorivex.academy/iyhjPCc2/
```
### Level 24
```
1.Open this url : https://z.voorivex.academy/iyhjPCc2/
2.Enter passwrod admin, admin
3.You will get "/vmJIFmc0" , then go to https://z.voorivex.academy/vmJIFmc0/
```
### Level 25
```
1.Curl like this : curl https://z.voorivex.academy/vmJIFmc0/ -H "Authorization: Basic WDpZ"
2.You will get "/bkfgoOVx" then go to https://z.voorivex.academy/bkfgoOVx/
```
### Level 26
1.Make HTML form like this and submit it:
```html
<!DOCTYPE html>
<html lang="en">
<head>
    <meta charset="UTF-8">
    <meta name="viewport" content="width=device-width, initial-scale=1.0">
    <title>Document</title>
</head>
<body>
    <form method="POST" action="https://z.voorivex.academy/bkfgoOVx/assets/challenge.php/">
    <input name="key" type="text">
    <button type="submit">submit</button>
    </form>
</body>
</html>
```
2.You will be redirected to https://z.voorivex.academy/giHFNVre/

### Level 27
```
1.Call "key(_0x59a9a2('0xaa'))" in the browser console
2.You will get "2054009446" , then go to https://z.voorivex.academy/2054009446/
```
### Level 28
```
1.Call "generateRandomString(c(0x0), 12)" in the browser console, you will get : "e__hel_allea"
2.Call "generateRandomString(;e__hel_allea')" in the browser console, you will get : "l__ala_eel"
3.Then go to https://z.voorivex.academy/l__ala_eel/
```
### Level 29
```
VIM Makes swp file automatically whenever you open a file with VIM
so index.php is open on the server now, just download the swp file of it
1.Wget like this : wget https://z.voorivex.academy/l__ala_eel/.index.php.swp
2.cat .index.php.swp, you will see this line : "if ($_GET['veryverysecretkey'] == 'veryverysecretvalue')" in the output
3.Open this url in browser : https://z.voorivex.academy/l__ala_eel/?veryverysecretkey=veryverysecretvalue
```
### Level 30
```
1.Curl like this : curl https://z.voorivex.academy/tibmHV32/ -H "X-Forwarded-For: 127.10.9.1"
2.You will get "/vkfVJCdx" , then go to https://z.voorivex.academy/vkfVJCdx
```
### Level 31
```
1.Curl like this : curl https://z.voorivex.academy/ -H "Host: 01.voorivex.academy"
2.You will get "/tb39kfmI" , then go to https://z.voorivex.academy/tb39kfmI
```
### Level 32
1.Reverse the function like this:
```php
<?php

function dec($data, $key) {
	$data = base64_decode($data);
    $result = '';
    $keyLength = strlen($key);
    $dataLength = strlen($data);

for ($i = 0; $i < $dataLength; $i++) {
        $char = $data[$i];
        $keyChar = $key[$i % $keyLength];
        $decodeChar = chr(ord($char) - ord($keyChar));
        $result .= $decodeChar;
    }

return $result;
}

$encdata = "3KXUpcSiqsmn4+a1";
$key = "tqbAtb7V0t";
$decdata = dec($encdata, $key);
echo $decdata;

?>
```
```
2.You will recieve the password : h4rdP@ssworD
3.Send request to challenge.php and you will get "pnq2K_s2On" in the Location header
4.Go to https://z.voorivex.academy/pnq2K_s2On
```

### Level 33
```
1.Wget the png file : wget https://z.voorivex.academy/pnq2K_s2On/zodd-final.png
2.Extract anything hidden in the image : binwalk -e zodd-final.png
3.The zip file inside is password protected
4.Use tweakpng tool to resize the image and change height to 1600
5.You will see the full image with password on the bottom right
6.The password of zip file is : 0oo000o0o
7.cat z.txt file and you will see this text : "I didn't think you would reach here, continue with berserK"
8.Then go to this url : https://z.voorivex.academy/berserK
```
 ## Booooooom, you defeated the zodd :)

VoorivexChallenge

VoorivexChallenge 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

VoorivexChallenge

VoorivexChallenge 최신버젼 다운로드

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README