diff options
Diffstat (limited to 'babushka')
| -rw-r--r-- | babushka/README.md | 23 | ||||
| -rw-r--r-- | babushka/flags.py | 1 | ||||
| -rw-r--r-- | babushka/gen.py | 266 |
3 files changed, 290 insertions, 0 deletions
diff --git a/babushka/README.md b/babushka/README.md new file mode 100644 index 0000000..bbb2e77 --- /dev/null +++ b/babushka/README.md @@ -0,0 +1,23 @@ +# babushka + +"I got this toy in a Russian gift shop." + +The file `babushka.py` has been omitted due to the size. It was generated by +`gen.py`. + +The challenge was named "babushka" because the program is designed like a +matryoshka doll. There is one entry point to a long (having 500 parts) chain of +functions, most unpacking the subsequent one in the chain. + +Each function in the chain does some check on the input. All of them, except for +the fourteenth, have some check that involves some decoy flag, and some way of +combining the results of the checks further down in the lineage. They are +combined such that only the output of one of the 500 functions is used. + +The intended solution was to write a script to extract all of the functions, and +look at the combiners to see which of the functions mattered. You could then +manually reverse engineer them to get the flag. + +The way the input is checked is about the same across all functions, so in +theory, one could write a script to extract the value the input is checked +against from all of the functions, and then try all 500 to see which one worked. diff --git a/babushka/flags.py b/babushka/flags.py new file mode 100644 index 0000000..b9135db --- /dev/null +++ b/babushka/flags.py @@ -0,0 +1 @@ +FLAGS = ['UMASS{c_m3m0ry_d0g_pwn_d0g_c0w_d0g}', 'UMASS{hack_hack_spi11ag3_pwn}', 'UMASS{music_a_quick1y_0i_r0p_n0p_spi11ag3}', 'UMASS{gdb_r0p_pwn_pyth0n_0w0_pick13_gdb}', 'UMASS{jabb3r_tim3_digging_ram_3133t_r0p_k3y}', 'UMASS{f0brincat3_1ist3rin3_spi11ag3_f1ag_c13an}', 'UMASS{my_gadg3t_f1ag_f0brincat3_r0p_a_hack3r}', 'UMASS{babushka_gdb_0v3rf10w_my_gadg3t_sarniqu3_m3m0ry}', 'UMASS{jabb3r_buff3r_ram_f0brincat3}', 'UMASS{0i_f0brincat3_pick13_a1r3ady_byt3c0d3_tim3}', 'UMASS{hack_c_r3v3rsing_ram}', 'UMASS{y0ur_0v3rf10w_n0p_scan_jabb3r_pyth0n_th3}', 'UMASS{c0w_sarniqu3_ctftim3_wat3r_byt3c0d3}', 'UMASS{th3_spi11ag3_byt3c0d3_ctftim3_hack}', 'UMASS{gdb_gdb_c13an_spi11ag3_digging}', 'UMASS{byt3c0d3_gadg3t_byt3c0d3_1izard_scan_n0p_sarniqu3}', 'UMASS{f00_n0p_spi11ag3_pick13}', 'UMASS{r3v3rsing_r0p_r0ck_byt3c0d3_c13an_0v3rf10w_3133t}', 'UMASS{a_m3m0ry_c0w_f1ag_spi11ag3}', 'UMASS{hydrat3_wat3r_an_wat3r}', 'UMASS{babushka_a_quick1y_hydrat3_0i}', 'UMASS{pyth0n_sarniqu3_c_buff3r_c13an_a_my}', 'UMASS{wat3r_digging_ctftim3_sarniqu3_c0w_c13an}', 'UMASS{a1r3ady_r3v3rsing_a1r3ady_y0ur}', 'UMASS{my_gadg3t_digging_gam3_buff3r_c0w}', 'UMASS{gam3_0v3rf10w_wat3r_gadg3t_c_byt3c0d3_my}', 'UMASS{d0g_spi11ag3_buff3r_r0p_quick1y_gadg3t_ram}', 'UMASS{hydrat3_0v3rf10w_a1r3ady_wat3r_jabb3r_umass_0i}', 'UMASS{r0p_c_my_f00_sarniqu3_f00}', 'UMASS{byt3c0d3_1ist3rin3_ctftim3_1ist3rin3}', 'UMASS{0i_digging_th3_a_1ist3rin3}', 'UMASS{ram_digging_k3y_spi11ag3_0v3rf10w_music_0i}', 'UMASS{m3m0ry_byt3c0d3_umass_pick13}', 'UMASS{my_f1ag_m3m0ry_1ist3rin3_c_k3y}', 'UMASS{sarniqu3_quick1y_hack_ctftim3_pyth0n}', 'UMASS{umass_r0ck_f00_gadg3t_c}', 'UMASS{jabb3r_0v3rf10w_f00_umass_c0w_y0ur}', 'UMASS{gdb_m3m0ry_pwn_digging}', 'UMASS{wat3r_ctftim3_wat3r_pick13}', 'UMASS{scan_f00_spi11ag3_3133t_1izard_gdb}', 'UMASS{pick13_hack3r_pyth0n_hydrat3_spi11ag3}', 'UMASS{gdb_spi11ag3_a1r3ady_0v3rf10w}', 'UMASS{m3m0ry_hydrat3_f1ag_ram_c0w}', 'UMASS{c_f00_c13an_y0ur}', 'UMASS{pick13_1izard_tim3_r3v3rsing_c0w_1ist3rin3}', 'UMASS{f1ag_m3m0ry_y0ur_r3v3rsing_gdb}', 'UMASS{c_spi11ag3_an_music}', 'UMASS{byt3c0d3_hydrat3_umass_babushka_scan_pick13_a1r3ady}', 'UMASS{scan_ctftim3_babushka_wat3r_digging_umass_jabb3r}', 'UMASS{c0w_ram_tim3_a}', 'UMASS{jabb3r_my_ram_r0ck_1ist3rin3}', 'UMASS{m3m0ry_a_pyth0n_scan}', 'UMASS{digging_ram_1izard_f0brincat3_f00}', 'UMASS{d0g_buff3r_sarniqu3_buff3r_f00_byt3c0d3}', 'UMASS{spi11ag3_pyth0n_f00_music_scan_wat3r}', 'UMASS{ram_pick13_pwn_buff3r_c13an}', 'UMASS{y0ur_pwn_pyth0n_pwn_ram_f1ag}', 'UMASS{tim3_pwn_hack3r_gam3_0w0}', 'UMASS{0i_hack_0v3rf10w_ctftim3_an_k3y}', 'UMASS{r0ck_hydrat3_gam3_an_1izard_scan_0i}', 'UMASS{a1r3ady_tim3_hack3r_m3m0ry_f0brincat3_an_scan}', 'UMASS{wat3r_f00_pick13_m3m0ry_m3m0ry}', 'UMASS{a_r3v3rsing_gam3_r3v3rsing_wat3r_scan}', 'UMASS{m3m0ry_my_pick13_buff3r_hack3r_f0brincat3}', 'UMASS{pyth0n_0w0_ctftim3_hydrat3_pyth0n}', 'UMASS{f1ag_n0p_f1ag_digging}', 'UMASS{my_umass_3133t_y0ur_r3v3rsing_gam3_spi11ag3}', 'UMASS{1ist3rin3_an_n0p_pyth0n_byt3c0d3_sarniqu3}', 'UMASS{music_f0brincat3_m3m0ry_c13an_pyth0n_m3m0ry_quick1y}', 'UMASS{f1ag_byt3c0d3_r0p_scan_f0brincat3_r0ck_scan}', 'UMASS{pwn_f0brincat3_f1ag_gdb}', 'UMASS{sarniqu3_hydrat3_a_3133t_3133t_0w0}', 'UMASS{ram_tim3_babushka_y0ur_n0p}', 'UMASS{1izard_a_sarniqu3_1ist3rin3_hack}', 'UMASS{gadg3t_f1ag_ctftim3_0v3rf10w_0v3rf10w}', 'UMASS{hack3r_f00_tim3_1ist3rin3_my_k3y}', 'UMASS{a1r3ady_y0ur_scan_c_umass}', 'UMASS{gam3_th3_hack_0v3rf10w_pwn_pyth0n_an}', 'UMASS{pyth0n_d0g_k3y_pwn_gam3_pyth0n_babushka}', 'UMASS{f1ag_hack_0w0_a1r3ady}', 'UMASS{n0p_scan_a_hack3r_hydrat3_jabb3r}', 'UMASS{pwn_c13an_0w0_ram_hack_gam3_0w0}', 'UMASS{f00_a1r3ady_gdb_r3v3rsing_pick13_quick1y_a}', 'UMASS{f00_pyth0n_gadg3t_byt3c0d3_babushka}', 'UMASS{1ist3rin3_spi11ag3_0v3rf10w_0v3rf10w_f1ag}', 'UMASS{hack3r_m3m0ry_gadg3t_sarniqu3}', 'UMASS{1ist3rin3_c_c0w_m3m0ry_scan_0i_my}', 'UMASS{gam3_0i_ctftim3_pick13_ctftim3_pick13_r0p}', 'UMASS{tim3_hack_r3v3rsing_th3_c13an}', 'UMASS{r0ck_d0g_jabb3r_3133t}', 'UMASS{c0w_gam3_th3_wat3r}', 'UMASS{0w0_m3m0ry_d0g_music_pick13_ram}', 'UMASS{f0brincat3_n0p_c_0w0}', 'UMASS{pick13_0i_f1ag_d0g}', 'UMASS{hydrat3_hack3r_d0g_hack_wat3r_m3m0ry}', 'UMASS{f1ag_wat3r_0i_ram_f1ag_1ist3rin3}', 'UMASS{sarniqu3_0i_r3v3rsing_c0w_buff3r_pyth0n_r0ck}', 'UMASS{m3m0ry_babushka_quick1y_gam3_ram_r0p_f1ag}', 'UMASS{r3v3rsing_umass_r0p_f00}', 'UMASS{ram_hydrat3_scan_r0ck_hydrat3_tim3}', 'UMASS{my_gadg3t_gdb_spi11ag3_r3v3rsing_th3}', 'UMASS{jabb3r_digging_1ist3rin3_umass_ram_pwn_d0g}', 'UMASS{0v3rf10w_k3y_pyth0n_umass}', 'UMASS{a1r3ady_c0w_tim3_3133t_pwn}', 'UMASS{gadg3t_0v3rf10w_m3m0ry_gadg3t}', 'UMASS{scan_ram_r3v3rsing_spi11ag3_gam3_ctftim3}', 'UMASS{0i_r0ck_hydrat3_gdb_babushka_buff3r_hack3r}', 'UMASS{1ist3rin3_a_music_ctftim3}', 'UMASS{f0brincat3_hack_tim3_0w0_sarniqu3_scan}', 'UMASS{my_r0p_f1ag_y0ur_f1ag}', 'UMASS{f1ag_d0g_my_buff3r_a}', 'UMASS{a_3133t_d0g_an_tim3_r0p}', 'UMASS{r0p_c0w_jabb3r_gam3}', 'UMASS{an_sarniqu3_1izard_babushka}', 'UMASS{buff3r_1izard_a_m3m0ry_pwn_digging_jabb3r}', 'UMASS{umass_f1ag_a_jabb3r}', 'UMASS{gadg3t_d0g_wat3r_scan_c0w}', 'UMASS{f0brincat3_jabb3r_tim3_buff3r}', 'UMASS{y0ur_gdb_buff3r_f1ag}', 'UMASS{a_music_y0ur_spi11ag3_n0p_1ist3rin3}', 'UMASS{my_an_my_ram_c_f1ag_f0brincat3}', 'UMASS{k3y_pwn_sarniqu3_sarniqu3_f0brincat3_babushka_my}', 'UMASS{my_c0w_digging_pwn_ctftim3_r0ck}', 'UMASS{byt3c0d3_ram_gam3_f00_buff3r_r0p_3133t}', 'UMASS{babushka_quick1y_f00_n0p_byt3c0d3}', 'UMASS{ctftim3_0v3rf10w_music_sarniqu3}', 'UMASS{ctftim3_hack3r_quick1y_jabb3r_tim3_babushka}', 'UMASS{hack_pick13_buff3r_c0w_music}', 'UMASS{f1ag_music_wat3r_r0ck_tim3}', 'UMASS{f0brincat3_pwn_pick13_0v3rf10w}', 'UMASS{r0ck_r3v3rsing_babushka_wat3r_n0p}', 'UMASS{a1r3ady_gam3_buff3r_c_ctftim3}', 'UMASS{m3m0ry_hydrat3_my_r0ck_hack}', 'UMASS{3133t_0v3rf10w_pick13_f1ag_scan_pwn_hack3r}', 'UMASS{ctftim3_f0brincat3_f0brincat3_f0brincat3_quick1y}', 'UMASS{umass_pick13_1ist3rin3_a}', 'UMASS{c_my_1ist3rin3_0v3rf10w_my_buff3r}', 'UMASS{hydrat3_f0brincat3_1ist3rin3_sarniqu3_f1ag_pick13}', 'UMASS{0i_1ist3rin3_f1ag_hack_pick13_0w0}', 'UMASS{spi11ag3_scan_f0brincat3_ctftim3_hack}', 'UMASS{pyth0n_gdb_y0ur_quick1y_pyth0n_r0ck}', 'UMASS{hydrat3_ctftim3_1ist3rin3_wat3r}', 'UMASS{a_buff3r_byt3c0d3_tim3_digging}', 'UMASS{d0g_a1r3ady_y0ur_pick13_gadg3t_buff3r}', 'UMASS{my_d0g_d0g_0i_pyth0n}', 'UMASS{3133t_an_gdb_k3y_c0w_f1ag_th3}', 'UMASS{tim3_digging_k3y_umass_babushka_1izard_spi11ag3}', 'UMASS{ctftim3_r3v3rsing_c_hack_r3v3rsing_m3m0ry}', 'UMASS{quick1y_pyth0n_tim3_hack_scan}', 'UMASS{c0w_hack_my_0v3rf10w}', 'UMASS{r0ck_ctftim3_tim3_digging_f00_f0brincat3_th3}', 'UMASS{sarniqu3_scan_umass_byt3c0d3_gam3}', 'UMASS{hack3r_music_gadg3t_n0p_0i_f0brincat3}', 'UMASS{1izard_n0p_hydrat3_gam3_ram_babushka_n0p}', 'UMASS{r0p_f1ag_gam3_0w0_f00}', 'UMASS{c_r3v3rsing_hydrat3_3133t_byt3c0d3_pwn_th3}', 'UMASS{hydrat3_c13an_a_m3m0ry_c13an}', 'UMASS{1ist3rin3_umass_pwn_ctftim3_1izard_sarniqu3}', 'UMASS{my_r3v3rsing_th3_c13an}', 'UMASS{pick13_f0brincat3_hack3r_babushka_r3v3rsing}', 'UMASS{pick13_gdb_quick1y_y0ur_gam3}', 'UMASS{my_pick13_jabb3r_r0p}', 'UMASS{gam3_ram_y0ur_a1r3ady_th3}', 'UMASS{jabb3r_r0p_f0brincat3_c_scan_r0p_my}', 'UMASS{f0brincat3_pick13_1ist3rin3_f1ag_r0p_buff3r}', 'UMASS{gam3_c0w_hack_byt3c0d3_tim3_n0p}', 'UMASS{0i_music_babushka_y0ur}', 'UMASS{jabb3r_0i_pwn_c13an_wat3r_1izard_sarniqu3}', 'UMASS{music_f00_1ist3rin3_pick13_quick1y_byt3c0d3_ctftim3}', 'UMASS{f1ag_th3_scan_c13an_r0ck_0i_pwn}', 'UMASS{f00_hack_quick1y_0w0_gdb}', 'UMASS{babushka_pwn_k3y_my}', 'UMASS{music_c0w_jabb3r_0i_m3m0ry_buff3r_sarniqu3}', 'UMASS{hack3r_n0p_buff3r_c_m3m0ry_f1ag}', 'UMASS{3133t_gdb_1ist3rin3_music}', 'UMASS{scan_hydrat3_hack_quick1y_d0g_hack3r}', 'UMASS{n0p_spi11ag3_f1ag_music_c0w}', 'UMASS{jabb3r_c0w_ram_d0g}', 'UMASS{f1ag_r0ck_byt3c0d3_a}', 'UMASS{an_f0brincat3_n0p_an_tim3_babushka}', 'UMASS{quick1y_1izard_f0brincat3_wat3r_f00_3133t}', 'UMASS{pwn_0v3rf10w_hack_r0p_f1ag_umass_ram}', 'UMASS{f0brincat3_r0ck_0w0_c0w_spi11ag3_f00}', 'UMASS{n0p_buff3r_r3v3rsing_sarniqu3_byt3c0d3_scan_tim3}', 'UMASS{gdb_pyth0n_th3_r3v3rsing_ram}', 'UMASS{ram_c_hack_wat3r_ctftim3}', 'UMASS{f0brincat3_f1ag_n0p_gadg3t}', 'UMASS{a_sarniqu3_an_spi11ag3_music_r3v3rsing_f1ag}', 'UMASS{f0brincat3_spi11ag3_my_ctftim3}', 'UMASS{a_an_buff3r_quick1y_c0w_quick1y}', 'UMASS{digging_m3m0ry_ctftim3_k3y_f0brincat3}', 'UMASS{tim3_0w0_0w0_my_my_0v3rf10w_quick1y}', 'UMASS{f0brincat3_gdb_th3_f0brincat3_f00}', 'UMASS{c0w_y0ur_gdb_ctftim3_gam3_music}', 'UMASS{3133t_spi11ag3_th3_f0brincat3_umass}', 'UMASS{c_my_hack_d0g_an}', 'UMASS{0w0_pyth0n_r0p_1izard_f0brincat3}', 'UMASS{c_f0brincat3_gadg3t_ram_pwn}', 'UMASS{d0g_1izard_hack3r_music_f00_0v3rf10w_music}', 'UMASS{d0g_ctftim3_music_d0g_hack3r}', 'UMASS{music_f1ag_jabb3r_f0brincat3}', 'UMASS{th3_an_1ist3rin3_byt3c0d3_jabb3r_r3v3rsing_f00}', 'UMASS{r3v3rsing_babushka_ram_gam3_hydrat3_c0w_k3y}', 'UMASS{sarniqu3_m3m0ry_hack_pick13}', 'UMASS{umass_c13an_r0ck_hack3r_gam3_sarniqu3_gadg3t}', 'UMASS{sarniqu3_digging_m3m0ry_a1r3ady_0w0_k3y}', 'UMASS{an_pwn_c0w_wat3r_0i_k3y_music}', 'UMASS{a_y0ur_buff3r_r0ck}', 'UMASS{c0w_hack3r_wat3r_byt3c0d3}', 'UMASS{f1ag_hack_c_buff3r_hydrat3_tim3}', 'UMASS{y0ur_gdb_y0ur_tim3_f1ag_f0brincat3}', 'UMASS{r3v3rsing_gadg3t_pyth0n_r3v3rsing}', 'UMASS{scan_jabb3r_r0ck_c0w_hydrat3_digging}', 'UMASS{0w0_hack_1izard_c13an_ram_1ist3rin3}', 'UMASS{th3_d0g_f1ag_r0ck_a_pwn}', 'UMASS{pwn_a_a1r3ady_gam3_0i_r0p_ctftim3}', 'UMASS{0w0_3133t_ctftim3_c0w_buff3r}', 'UMASS{hydrat3_f0brincat3_a_quick1y_hack_th3}', 'UMASS{0i_m3m0ry_f1ag_spi11ag3_hack_byt3c0d3}', 'UMASS{th3_gdb_n0p_gam3}', 'UMASS{pick13_babushka_ram_n0p}', 'UMASS{f00_an_hack3r_r0ck_r0p_sarniqu3_music}', 'UMASS{music_1ist3rin3_a1r3ady_ram_1izard_tim3}', 'UMASS{hydrat3_ram_k3y_d0g}', 'UMASS{c_c_f0brincat3_1izard_c_scan_hack3r}', 'UMASS{music_a_k3y_d0g_ctftim3_my_f1ag}', 'UMASS{an_babushka_f1ag_c}', 'UMASS{byt3c0d3_pick13_d0g_gdb_k3y}', 'UMASS{music_spi11ag3_k3y_a1r3ady}', 'UMASS{m3m0ry_buff3r_k3y_gadg3t_th3_d0g_c13an}', 'UMASS{1izard_3133t_f00_n0p_f0brincat3}', 'UMASS{hydrat3_ram_a1r3ady_jabb3r}', 'UMASS{hack3r_3133t_c13an_k3y_n0p_a_k3y}', 'UMASS{umass_1ist3rin3_0w0_gdb}', 'UMASS{1izard_a1r3ady_my_n0p}', 'UMASS{r0ck_ram_c13an_an_gdb_hydrat3}', 'UMASS{pwn_c0w_an_digging_byt3c0d3_0v3rf10w}', 'UMASS{pyth0n_d0g_a1r3ady_gadg3t}', 'UMASS{r0p_gdb_gam3_hack_music_byt3c0d3}', 'UMASS{buff3r_a_k3y_c13an_gadg3t_an}', 'UMASS{quick1y_r0p_1izard_music_r0p_ram}', 'UMASS{r3v3rsing_0v3rf10w_gadg3t_k3y}', 'UMASS{byt3c0d3_buff3r_3133t_babushka_tim3_c13an}', 'UMASS{quick1y_3133t_c13an_ram_hack3r_th3}', 'UMASS{scan_a_f00_an_1ist3rin3_c_f0brincat3}', 'UMASS{ram_d0g_0v3rf10w_f1ag_gadg3t}', 'UMASS{hack3r_gam3_1ist3rin3_scan}', 'UMASS{hack_0i_0i_music_k3y}', 'UMASS{m3m0ry_n0p_gadg3t_c0w_gdb}', 'UMASS{hydrat3_jabb3r_ram_c13an}', 'UMASS{r3v3rsing_scan_f00_f1ag_c_ram}', 'UMASS{digging_f1ag_sarniqu3_babushka_c0w_hack3r_0w0}', 'UMASS{a_gdb_hack_hydrat3_spi11ag3_r3v3rsing_r0p}', 'UMASS{1izard_spi11ag3_1izard_0w0_th3_gdb_r0p}', 'UMASS{tim3_spi11ag3_jabb3r_an_an_f1ag}', 'UMASS{d0g_pwn_r0ck_y0ur_an}', 'UMASS{c_my_c_0w0}', 'UMASS{n0p_f1ag_ctftim3_pyth0n}', 'UMASS{3133t_th3_n0p_gdb}', 'UMASS{r0p_quick1y_pick13_0i_a1r3ady_an}', 'UMASS{buff3r_hack_music_gam3_ctftim3}', 'UMASS{hack3r_my_3133t_a_c0w}', 'UMASS{tim3_umass_f1ag_byt3c0d3_c13an}', 'UMASS{buff3r_music_f1ag_0v3rf10w_n0p_r0p_ram}', 'UMASS{th3_gam3_gadg3t_pick13_0v3rf10w_f0brincat3_r3v3rsing}', 'UMASS{n0p_gdb_spi11ag3_th3}', 'UMASS{n0p_hydrat3_m3m0ry_ctftim3_ram}', 'UMASS{ctftim3_my_c0w_gam3}', 'UMASS{wat3r_a1r3ady_hack_gdb}', 'UMASS{0w0_babushka_pwn_r0p_d0g}', 'UMASS{r0ck_pick13_my_hack_buff3r_f1ag_f00}', 'UMASS{my_hack3r_c0w_music_c}', 'UMASS{sarniqu3_wat3r_1ist3rin3_hydrat3_ram_pyth0n}', 'UMASS{c13an_d0g_th3_hack3r}', 'UMASS{a1r3ady_my_babushka_pick13_r0p_ctftim3}', 'UMASS{0v3rf10w_c13an_byt3c0d3_a_a_jabb3r_gadg3t}', 'UMASS{pick13_spi11ag3_0i_an}', 'UMASS{buff3r_c0w_wat3r_jabb3r_c13an_hack_scan}', 'UMASS{sarniqu3_1izard_spi11ag3_spi11ag3}', 'UMASS{ram_r0ck_r0ck_1ist3rin3_wat3r_0v3rf10w_c13an}', 'UMASS{quick1y_pyth0n_3133t_jabb3r_r0p_c0w_c13an}', 'UMASS{r3v3rsing_0w0_3133t_babushka_sarniqu3_pyth0n}', 'UMASS{0w0_r3v3rsing_hack_m3m0ry_n0p_ctftim3_buff3r}', 'UMASS{0i_f1ag_quick1y_gdb_a1r3ady_gdb}', 'UMASS{m3m0ry_my_jabb3r_hack3r}', 'UMASS{0i_spi11ag3_tim3_pyth0n_f1ag_c}', 'UMASS{ram_d0g_c13an_buff3r_y0ur_buff3r_pick13}', 'UMASS{babushka_n0p_n0p_tim3_a1r3ady_hack3r}', 'UMASS{0v3rf10w_f00_0v3rf10w_gam3_0i_0v3rf10w}', 'UMASS{0v3rf10w_scan_c0w_hack_babushka_c13an_0w0}', 'UMASS{y0ur_hydrat3_digging_gdb_pwn_gadg3t}', 'UMASS{gadg3t_pick13_y0ur_my_m3m0ry_0i}', 'UMASS{1izard_m3m0ry_byt3c0d3_gadg3t_k3y_d0g}', 'UMASS{1ist3rin3_pyth0n_scan_f1ag_a}', 'UMASS{tim3_1izard_c_0v3rf10w_a_y0ur}', 'UMASS{f00_babushka_gdb_0w0_music_d0g}', 'UMASS{0i_tim3_f00_a_f1ag_digging}', 'UMASS{c0w_wat3r_gdb_0w0_babushka_a_tim3}', 'UMASS{spi11ag3_spi11ag3_hydrat3_tim3_3133t}', 'UMASS{byt3c0d3_babushka_a_my_1izard}', 'UMASS{ctftim3_tim3_gdb_f0brincat3_hydrat3_an_f00}', 'UMASS{wat3r_buff3r_k3y_m3m0ry}', 'UMASS{sarniqu3_f1ag_f1ag_gam3}', 'UMASS{0w0_y0ur_hydrat3_babushka_r0p}', 'UMASS{digging_a_sarniqu3_d0g_k3y_a1r3ady}', 'UMASS{f1ag_pwn_f00_ctftim3_y0ur_1izard}', 'UMASS{spi11ag3_f0brincat3_pyth0n_a_my}', 'UMASS{r0p_byt3c0d3_1ist3rin3_y0ur_f0brincat3_an}', 'UMASS{gdb_umass_pick13_ram_r0ck_quick1y_digging}', 'UMASS{a1r3ady_digging_my_gdb_f00_gadg3t_hydrat3}', 'UMASS{music_th3_0i_r3v3rsing_jabb3r}', 'UMASS{f00_gdb_wat3r_c_pyth0n_pick13_pwn}', 'UMASS{c0w_gam3_scan_0i_d0g}', 'UMASS{pwn_th3_hydrat3_scan_gam3_n0p_r0p}', 'UMASS{tim3_quick1y_hack_c0w_tim3}', 'UMASS{sarniqu3_r0ck_pwn_f1ag}', 'UMASS{th3_0i_music_r0ck_tim3_my}', 'UMASS{f00_f0brincat3_byt3c0d3_m3m0ry_d0g_m3m0ry_a}', 'UMASS{f00_1izard_hack3r_ctftim3}', 'UMASS{ram_a_3133t_0i_d0g_c}', 'UMASS{hack_r0p_r3v3rsing_1ist3rin3_c13an_a}', 'UMASS{byt3c0d3_quick1y_r0p_f1ag}', 'UMASS{an_music_ram_jabb3r_f1ag}', 'UMASS{ctftim3_tim3_umass_pick13}', 'UMASS{digging_an_spi11ag3_my}', 'UMASS{0v3rf10w_r0ck_f1ag_gadg3t_k3y}', 'UMASS{spi11ag3_quick1y_0i_music_f1ag_f1ag}', 'UMASS{a_d0g_spi11ag3_music_r0ck_a1r3ady}', 'UMASS{c13an_k3y_c13an_a_babushka_r0p}', 'UMASS{c0w_gdb_0i_pyth0n}', 'UMASS{wat3r_hack_0w0_d0g_c0w_pwn_0v3rf10w}', 'UMASS{k3y_scan_sarniqu3_wat3r_jabb3r}', 'UMASS{quick1y_scan_music_0v3rf10w_a}', 'UMASS{f1ag_buff3r_gam3_music_ram_ram_0v3rf10w}', 'UMASS{y0ur_spi11ag3_r3v3rsing_sarniqu3}', 'UMASS{gam3_spi11ag3_byt3c0d3_f0brincat3}', 'UMASS{n0p_music_ctftim3_pyth0n_pwn_d0g_sarniqu3}', 'UMASS{hydrat3_buff3r_3133t_c0w_0w0}', 'UMASS{hydrat3_gam3_r0p_my}', 'UMASS{umass_a1r3ady_c13an_m3m0ry_n0p_pyth0n}', 'UMASS{music_k3y_c13an_c13an_my_c0w_quick1y}', 'UMASS{ctftim3_spi11ag3_c_a}', 'UMASS{sarniqu3_umass_buff3r_r0ck}', 'UMASS{digging_a1r3ady_pick13_m3m0ry_pwn_r3v3rsing}', 'UMASS{0w0_f0brincat3_a_3133t}', 'UMASS{pyth0n_d0g_umass_quick1y_byt3c0d3_c13an_k3y}', 'UMASS{jabb3r_0w0_wat3r_k3y_r0p_ram}', 'UMASS{n0p_tim3_c0w_ram_babushka_0i}', 'UMASS{umass_ram_y0ur_0v3rf10w_gam3_th3}', 'UMASS{c13an_pyth0n_c0w_m3m0ry}', 'UMASS{spi11ag3_byt3c0d3_spi11ag3_a_hydrat3_ram}', 'UMASS{ctftim3_pyth0n_ram_c0w_wat3r_n0p}', 'UMASS{pyth0n_3133t_ctftim3_hydrat3}', 'UMASS{r0p_scan_f1ag_music_c_r0ck}', 'UMASS{r0p_r3v3rsing_th3_ram}', 'UMASS{c0w_wat3r_r0ck_my_0w0_f1ag}', 'UMASS{y0ur_gam3_hack_buff3r}', 'UMASS{gam3_hydrat3_f0brincat3_hydrat3_0v3rf10w}', 'UMASS{n0p_r0ck_byt3c0d3_k3y_1izard_n0p}', 'UMASS{f0brincat3_pick13_pwn_hack3r}', 'UMASS{pyth0n_r0ck_music_r0ck_byt3c0d3}', 'UMASS{my_byt3c0d3_th3_gdb}', 'UMASS{f0brincat3_hack_y0ur_gadg3t_umass_a1r3ady_gam3}', 'UMASS{3133t_th3_0v3rf10w_m3m0ry}', 'UMASS{pick13_pyth0n_hack_0i_pwn_a_pick13}', 'UMASS{1izard_f1ag_th3_scan_ctftim3}', 'UMASS{c13an_th3_a_f00_gam3}', 'UMASS{spi11ag3_c13an_hack_pyth0n_m3m0ry_hack3r}', 'UMASS{th3_byt3c0d3_hydrat3_1izard_m3m0ry_ctftim3}', 'UMASS{0i_sarniqu3_ctftim3_gam3_pick13_c0w}', 'UMASS{0v3rf10w_pick13_my_a1r3ady_hack3r_umass_hack3r}', 'UMASS{ctftim3_r0ck_pick13_0w0_ram}', 'UMASS{byt3c0d3_quick1y_music_a}', 'UMASS{buff3r_1ist3rin3_buff3r_my_0w0_tim3}', 'UMASS{pwn_ctftim3_scan_r3v3rsing}', 'UMASS{r3v3rsing_pwn_jabb3r_scan_r3v3rsing_jabb3r_spi11ag3}', 'UMASS{r0ck_pyth0n_gadg3t_wat3r_pwn_spi11ag3_babushka}', 'UMASS{f1ag_hack3r_m3m0ry_m3m0ry_umass}', 'UMASS{sarniqu3_hydrat3_c0w_m3m0ry_m3m0ry}', 'UMASS{c_scan_r0p_f1ag}', 'UMASS{gdb_r3v3rsing_1ist3rin3_hack_c13an}', 'UMASS{3133t_music_f1ag_scan_hack3r}', 'UMASS{0w0_pyth0n_n0p_y0ur_th3_wat3r_wat3r}', 'UMASS{pwn_an_hack_sarniqu3_0i_gdb}', 'UMASS{hack_scan_1izard_pick13_gadg3t}', 'UMASS{f0brincat3_hydrat3_m3m0ry_f1ag_n0p_r0ck_m3m0ry}', 'UMASS{gadg3t_hydrat3_k3y_3133t_0w0_c13an}', 'UMASS{c_c0w_d0g_a_3133t_buff3r_spi11ag3}', 'UMASS{hack_tim3_sarniqu3_r0p_jabb3r_quick1y_gam3}', 'UMASS{umass_1izard_ram_ctftim3}', 'UMASS{umass_a_th3_a_umass}', 'UMASS{hack3r_k3y_ctftim3_tim3_hydrat3_gadg3t}', 'UMASS{pick13_quick1y_byt3c0d3_hydrat3_d0g}', 'UMASS{y0ur_hack_ram_tim3}', 'UMASS{0v3rf10w_byt3c0d3_quick1y_hack3r_d0g_an}', 'UMASS{buff3r_hack3r_a1r3ady_pwn}', 'UMASS{quick1y_quick1y_th3_0i_music_my}', 'UMASS{r3v3rsing_d0g_umass_pyth0n_umass_hack3r}', 'UMASS{f00_gam3_spi11ag3_m3m0ry_0v3rf10w_wat3r}', 'UMASS{tim3_th3_scan_buff3r_r0ck_my}', 'UMASS{gadg3t_pick13_pwn_umass_my_1ist3rin3_hack3r}', 'UMASS{buff3r_y0ur_r0ck_0v3rf10w}', 'UMASS{pyth0n_k3y_n0p_m3m0ry_tim3}', 'UMASS{gam3_d0g_0w0_y0ur_0i_quick1y_c}', 'UMASS{c0w_music_m3m0ry_buff3r}', 'UMASS{jabb3r_1ist3rin3_an_scan_digging_gam3}', 'UMASS{wat3r_gdb_sarniqu3_gadg3t_r3v3rsing_tim3_r0p}', 'UMASS{music_scan_my_1izard_0i}', 'UMASS{jabb3r_3133t_an_f00_scan}', 'UMASS{wat3r_y0ur_hack_wat3r_m3m0ry_quick1y_pyth0n}', 'UMASS{a1r3ady_3133t_0i_spi11ag3_pick13_gdb_sarniqu3}', 'UMASS{hack3r_1ist3rin3_hydrat3_0v3rf10w_ctftim3_r3v3rsing_k3y}', 'UMASS{c13an_digging_scan_my_c0w_k3y_c}', 'UMASS{th3_ram_c13an_f0brincat3_f1ag_babushka}', 'UMASS{music_0i_quick1y_ram}', 'UMASS{0v3rf10w_k3y_sarniqu3_hack3r_jabb3r}', 'UMASS{music_0v3rf10w_music_r0ck_c0w}', 'UMASS{gadg3t_quick1y_my_tim3_umass_pwn}', 'UMASS{r3v3rsing_ram_a_r3v3rsing}', 'UMASS{r3v3rsing_gdb_y0ur_a1r3ady_1ist3rin3}', 'UMASS{r3v3rsing_3133t_k3y_1ist3rin3_r0ck}', 'UMASS{th3_a1r3ady_spi11ag3_ram_babushka_0i_m3m0ry}', 'UMASS{3133t_umass_1izard_0w0}', 'UMASS{sarniqu3_a_ram_quick1y_jabb3r_digging}', 'UMASS{d0g_sarniqu3_m3m0ry_gadg3t_pyth0n_tim3}', 'UMASS{hack_1izard_babushka_hydrat3_scan_k3y}', 'UMASS{gadg3t_tim3_d0g_umass_sarniqu3}', 'UMASS{n0p_buff3r_my_digging_wat3r_k3y_ram}', 'UMASS{wat3r_scan_pick13_f1ag_c13an_a1r3ady_m3m0ry}', 'UMASS{gadg3t_pick13_jabb3r_0v3rf10w_f00_0w0}', 'UMASS{babushka_m3m0ry_c0w_n0p_r0p}', 'UMASS{n0p_pwn_buff3r_spi11ag3_0i_digging_digging}', 'UMASS{scan_spi11ag3_quick1y_0v3rf10w_f0brincat3_jabb3r_an}', 'UMASS{babushka_buff3r_tim3_r3v3rsing_k3y_c_tim3}', 'UMASS{1izard_d0g_f1ag_umass_3133t}', 'UMASS{n0p_jabb3r_tim3_gadg3t_a_1izard_spi11ag3}', 'UMASS{wat3r_1ist3rin3_hack_hack3r_digging}', 'UMASS{pyth0n_gadg3t_f0brincat3_f1ag_r0ck_c0w_buff3r}', 'UMASS{hydrat3_m3m0ry_spi11ag3_0v3rf10w}', 'UMASS{gam3_f0brincat3_wat3r_f00_sarniqu3}', 'UMASS{d0g_my_c_gdb_gadg3t_c}', 'UMASS{3133t_gam3_my_scan_c0w_n0p_y0ur}', 'UMASS{th3_babushka_wat3r_th3_c13an_an}', 'UMASS{buff3r_0w0_quick1y_n0p_k3y}', 'UMASS{gam3_pyth0n_c0w_1izard}', 'UMASS{hack_3133t_an_1izard_jabb3r_0i_wat3r}', 'UMASS{1izard_wat3r_umass_babushka_ctftim3}', 'UMASS{1ist3rin3_my_th3_gadg3t_jabb3r_th3_d0g}', 'UMASS{n0p_1izard_wat3r_quick1y}', 'UMASS{a1r3ady_pwn_my_pyth0n_hydrat3_digging_pyth0n}', 'UMASS{ctftim3_th3_pwn_r0ck_c0w}', 'UMASS{k3y_1izard_ram_c13an}', 'UMASS{k3y_r3v3rsing_music_y0ur_r0ck_my}', 'UMASS{d0g_f1ag_hydrat3_gdb_n0p_tim3_f00}', 'UMASS{ctftim3_pick13_f0brincat3_an_0i}', 'UMASS{ram_1izard_jabb3r_m3m0ry}', 'UMASS{r0ck_hydrat3_c0w_hydrat3_pick13}', 'UMASS{0i_hack3r_spi11ag3_an_c13an_th3_th3}', 'UMASS{1ist3rin3_ram_th3_a1r3ady}', 'UMASS{hack3r_hydrat3_f1ag_spi11ag3_1ist3rin3_gam3_jabb3r}', 'UMASS{f1ag_f0brincat3_c_gadg3t}', 'UMASS{c_f0brincat3_ctftim3_k3y_0i}', 'UMASS{ctftim3_music_buff3r_0v3rf10w}', 'UMASS{pwn_gam3_gadg3t_pick13_c_spi11ag3}', 'UMASS{3133t_buff3r_f00_c_k3y_th3}', 'UMASS{pick13_ram_1ist3rin3_d0g}', 'UMASS{spi11ag3_k3y_hydrat3_c}', 'UMASS{c0w_1izard_ctftim3_pwn_r3v3rsing_pick13_f1ag}', 'UMASS{digging_byt3c0d3_y0ur_gadg3t}', 'UMASS{f1ag_r0p_babushka_pwn_my_0v3rf10w_ctftim3}', 'UMASS{wat3r_an_a1r3ady_digging_0i_n0p}', 'UMASS{buff3r_r0p_c_k3y_gam3_umass_y0ur}', 'UMASS{f1ag_m3m0ry_c13an_f1ag}', 'UMASS{hack3r_gadg3t_digging_k3y_y0ur_a}', 'UMASS{ram_r0ck_n0p_my_1izard_umass}', 'UMASS{d0g_ram_1ist3rin3_pyth0n_ctftim3_3133t}', 'UMASS{c_tim3_f0brincat3_y0ur}', 'UMASS{gdb_f00_n0p_f1ag_gdb_wat3r_r3v3rsing}', 'UMASS{gam3_buff3r_n0p_0i_gam3_r3v3rsing_f1ag}', 'UMASS{c13an_n0p_0i_gdb_c13an}', 'UMASS{umass_3133t_0v3rf10w_buff3r_ctftim3}', 'UMASS{c0w_digging_ctftim3_f0brincat3_a}', 'UMASS{quick1y_pick13_f1ag_1izard_f0brincat3}', 'UMASS{m3m0ry_pyth0n_a1r3ady_a_0v3rf10w_c}', 'UMASS{hydrat3_digging_th3_r3v3rsing_jabb3r}', 'UMASS{digging_tim3_m3m0ry_wat3r_gam3}', 'UMASS{r0p_a1r3ady_tim3_0w0_r0ck}', 'UMASS{gadg3t_jabb3r_music_hack_hack3r}', 'UMASS{f1ag_wat3r_1ist3rin3_c0w}', 'UMASS{k3y_hack3r_jabb3r_3133t}', 'UMASS{pwn_pwn_tim3_quick1y}', 'UMASS{byt3c0d3_hack3r_gdb_hack3r_byt3c0d3_quick1y_0i}', 'UMASS{1izard_digging_gdb_f00_f1ag}', 'UMASS{0i_gadg3t_r0p_pick13}', 'UMASS{r0p_spi11ag3_th3_0v3rf10w}', 'UMASS{m3m0ry_f00_c13an_0v3rf10w}', 'UMASS{f1ag_pick13_a1r3ady_0w0_c0w_hydrat3_hack}', 'UMASS{tim3_hack_byt3c0d3_f0brincat3}', 'UMASS{babushka_r0ck_n0p_r0ck}', 'UMASS{r0p_gam3_babushka_f0brincat3_f1ag_hack3r}', 'UMASS{a_hydrat3_f1ag_r0ck}', 'UMASS{pyth0n_pwn_1izard_f00_pwn_digging_scan}', 'UMASS{r3v3rsing_1ist3rin3_f00_f00_0v3rf10w_my}', 'UMASS{a_babushka_an_tim3_music_pyth0n_umass}', 'UMASS{n0p_byt3c0d3_1ist3rin3_jabb3r_music_r3v3rsing_c13an}', 'UMASS{jabb3r_ram_scan_hack}', 'UMASS{pwn_an_tim3_hydrat3_jabb3r}', 'UMASS{hack_f1ag_k3y_c_c_byt3c0d3}', 'UMASS{gadg3t_tim3_a1r3ady_1ist3rin3}', 'UMASS{tim3_3133t_buff3r_babushka_1izard}', 'UMASS{babushka_spi11ag3_th3_byt3c0d3}', 'UMASS{y0ur_spi11ag3_r3v3rsing_0v3rf10w_byt3c0d3}', 'UMASS{0w0_pyth0n_wat3r_3133t_gam3}', 'UMASS{buff3r_babushka_scan_0w0_babushka_music_r3v3rsing}', 'UMASS{ram_c0w_1ist3rin3_music_3133t_r0p_f1ag}', 'UMASS{an_pick13_hack3r_a1r3ady_f00_th3_1izard}', 'UMASS{r3v3rsing_c0w_music_quick1y_1izard_0i_d0g}', 'UMASS{byt3c0d3_r3v3rsing_hack3r_r0ck_hydrat3}', 'UMASS{c13an_my_3133t_pwn}', 'UMASS{f0brincat3_r0ck_f1ag_gdb_f00_hydrat3}', 'UMASS{pick13_gam3_pwn_f1ag_0i_c13an_r3v3rsing}', 'UMASS{n0p_1izard_a_f1ag_ctftim3_gadg3t}', 'UMASS{quick1y_0v3rf10w_ram_r0ck_digging}', 'UMASS{k3y_gdb_jabb3r_0i_r0p}', 'UMASS{1izard_1izard_1ist3rin3_pwn}', 'UMASS{my_tim3_a1r3ady_r0ck_r0p_th3}', 'UMASS{spi11ag3_hydrat3_pyth0n_r0p_a1r3ady}', 'UMASS{m3m0ry_pick13_pick13_r0ck_pyth0n}', 'UMASS{th3_spi11ag3_0v3rf10w_pick13}', 'UMASS{gdb_f1ag_pyth0n_jabb3r_babushka_tim3_pwn}', 'UMASS{y0ur_ram_d0g_c_m3m0ry_gam3_umass}', 'UMASS{jabb3r_my_hack_hack_umass}', 'UMASS{gadg3t_jabb3r_0i_wat3r}', 'UMASS{digging_0w0_jabb3r_digging_music_ctftim3_m3m0ry}', 'UMASS{pick13_1ist3rin3_wat3r_tim3_f0brincat3_c13an}', 'UMASS{0w0_f00_ram_my_m3m0ry_spi11ag3_c0w}', 'UMASS{0w0_hydrat3_r3v3rsing_c_quick1y_my}', 'UMASS{ram_k3y_scan_gadg3t_an_gdb}', 'UMASS{hack_f1ag_umass_my_3133t_an_r0ck}', 'UMASS{0i_c0w_gam3_a_byt3c0d3}', 'UMASS{gam3_buff3r_c_k3y_babushka_n0p}', 'UMASS{k3y_f1ag_hydrat3_f1ag_hydrat3_1izard_wat3r}', 'UMASS{music_hydrat3_hydrat3_music_digging_umass_hydrat3}', 'UMASS{gdb_m3m0ry_0w0_y0ur_f1ag_c13an_c0w}', 'UMASS{an_pick13_gadg3t_0v3rf10w_m3m0ry}', 'UMASS{hack3r_f00_ram_my_c_tim3}', 'UMASS{digging_k3y_f0brincat3_babushka_gam3}', 'UMASS{ctftim3_gdb_hack_buff3r}', 'UMASS{a1r3ady_gadg3t_f1ag_scan_pick13_a}', 'UMASS{byt3c0d3_jabb3r_scan_f00}', 'UMASS{umass_ram_th3_my_c13an_scan_my}', 'UMASS{spi11ag3_ram_pyth0n_quick1y_tim3_sarniqu3}', 'UMASS{f00_pick13_a_hydrat3_r0p_wat3r_r3v3rsing}', 'UMASS{r0p_f0brincat3_a_r0ck_sarniqu3}', 'UMASS{f1ag_th3_an_babushka}', 'UMASS{pyth0n_pyth0n_hack3r_music}', 'UMASS{scan_n0p_an_wat3r_buff3r_f1ag_my}', 'UMASS{c13an_3133t_gdb_ctftim3_wat3r}', 'UMASS{c13an_jabb3r_f0brincat3_th3_c0w_r0ck_music}', 'UMASS{gdb_r3v3rsing_digging_1izard_hack3r}', 'UMASS{m3m0ry_th3_m3m0ry_0w0_c13an}', 'UMASS{n0p_gam3_spi11ag3_ram}', 'UMASS{scan_f00_f0brincat3_f00_gadg3t}', 'UMASS{quick1y_0i_pyth0n_c0w_f0brincat3_music_digging}', 'UMASS{0i_pyth0n_pyth0n_pwn_ctftim3}', 'UMASS{f1ag_n0p_jabb3r_f0brincat3_y0ur}', 'UMASS{ram_pick13_f1ag_f0brincat3_buff3r_sarniqu3_f00}', 'UMASS{pwn_gam3_hack3r_0w0_umass_music}', 'UMASS{a1r3ady_f0brincat3_pwn_f00}', 'UMASS{ctftim3_music_3133t_an_spi11ag3_gam3}', 'UMASS{0w0_r0ck_m3m0ry_digging_k3y}', 'UMASS{m3m0ry_sarniqu3_spi11ag3_jabb3r_music_0v3rf10w_scan}', 'UMASS{c13an_3133t_byt3c0d3_spi11ag3}', 'UMASS{c13an_c0w_gadg3t_f1ag_3133t}', 'UMASS{gadg3t_r3v3rsing_jabb3r_babushka_f1ag_sarniqu3_buff3r}', 'UMASS{y0ur_my_spi11ag3_n0p_3133t_gam3}', 'UMASS{music_f1ag_wat3r_0w0_r3v3rsing_0v3rf10w_f1ag}', 'UMASS{spi11ag3_scan_f0brincat3_my_gam3_an_f1ag}', 'UMASS{c0w_music_gam3_pyth0n_hydrat3_an_0w0}', 'UMASS{f1ag_hack3r_r0ck_tim3}', 'UMASS{ram_pwn_0v3rf10w_gam3}', 'UMASS{r0ck_hack_f1ag_f1ag_3133t_r0p}', 'UMASS{f0brincat3_n0p_pick13_hack3r_gam3_1izard}', 'UMASS{y0ur_f00_3133t_3133t_jabb3r_hack3r_spi11ag3}', 'UMASS{r3v3rsing_sarniqu3_r0p_an_a_f00}', 'UMASS{r0ck_c13an_ram_an_pick13_umass}', 'UMASS{pick13_a_m3m0ry_umass_ram_c13an_ctftim3}', 'UMASS{a_1izard_c13an_digging_hydrat3_byt3c0d3}', 'UMASS{1ist3rin3_c13an_quick1y_gadg3t_tim3_gdb}', 'UMASS{r0p_babushka_gdb_hack_spi11ag3}', 'UMASS{1izard_hack3r_scan_0v3rf10w_hack3r_hack}', 'UMASS{buff3r_0i_d0g_f00}', 'UMASS{music_f1ag_byt3c0d3_c0w_wat3r}', 'UMASS{an_r0p_babushka_y0ur_1izard}', 'UMASS{hydrat3_gadg3t_byt3c0d3_f1ag}', 'UMASS{spi11ag3_r0p_pick13_a_r0ck}', 'UMASS{th3_1izard_pyth0n_n0p}', 'UMASS{buff3r_spi11ag3_hack3r_buff3r}', 'UMASS{0i_m3m0ry_babushka_r0ck_f1ag_hack_gam3}', 'UMASS{n0p_gadg3t_pick13_k3y_f00}', 'UMASS{buff3r_quick1y_m3m0ry_quick1y_r3v3rsing_f00}', 'UMASS{3133t_1izard_an_scan_umass}', 'UMASS{y0ur_th3_ram_y0ur_3133t_y0ur}', 'UMASS{f1ag_0v3rf10w_f00_wat3r_digging_gadg3t_r0p}', 'UMASS{hack_0v3rf10w_th3_ram_sarniqu3_hack3r_babushka}', 'UMASS{c_c_ctftim3_0i_c0w}', 'UMASS{ram_spi11ag3_m3m0ry_digging_sarniqu3_music}', 'UMASS{umass_spi11ag3_gam3_d0g_0v3rf10w_1izard}', 'UMASS{y0ur_r0ck_m3m0ry_hack3r_hydrat3}', 'UMASS{0v3rf10w_f1ag_3133t_1izard}', 'UMASS{hack_umass_d0g_babushka_byt3c0d3}', 'UMASS{sarniqu3_a1r3ady_r0p_pwn}', 'UMASS{babushka_quick1y_ctftim3_1ist3rin3}', 'UMASS{pick13_pwn_scan_1ist3rin3}', 'UMASS{my_tim3_music_digging_ctftim3_th3_c0w}', 'UMASS{0v3rf10w_k3y_hack3r_buff3r_jabb3r_spi11ag3_scan}', 'UMASS{babushka_pick13_hydrat3_music_f1ag_babushka}', 'UMASS{y0ur_byt3c0d3_1izard_a1r3ady}', 'UMASS{1ist3rin3_gadg3t_gadg3t_c_digging}', 'UMASS{umass_c13an_0i_r0ck_1izard_gdb}', 'UMASS{c13an_hack3r_1izard_quick1y_c}', 'UMASS{pick13_gdb_r0ck_m3m0ry_r3v3rsing_k3y}', 'UMASS{tim3_pick13_r3v3rsing_gadg3t_an}', 'UMASS{c_ctftim3_gam3_r0p_hack3r}', 'UMASS{byt3c0d3_digging_my_d0g_r0ck_pick13_r0ck}', 'UMASS{f00_1izard_f1ag_th3_wat3r_hydrat3}', 'UMASS{c13an_y0ur_c0w_1ist3rin3_a}', 'UMASS{c0w_0v3rf10w_0w0_3133t}', 'UMASS{1izard_hydrat3_umass_byt3c0d3_jabb3r_hydrat3}', 'UMASS{a_buff3r_scan_0v3rf10w_1ist3rin3_digging_f00}', 'UMASS{gam3_f1ag_r3v3rsing_gadg3t_k3y_d0g}', 'UMASS{my_3133t_spi11ag3_c13an_1izard_3133t}', 'UMASS{gdb_th3_an_sarniqu3_babushka}', 'UMASS{c_ctftim3_ram_hack_k3y}', 'UMASS{an_0w0_digging_pwn_y0ur}', 'UMASS{hack3r_ctftim3_a_n0p_n0p_pick13}', 'UMASS{1ist3rin3_buff3r_r3v3rsing_umass_1izard}', 'UMASS{k3y_gam3_ctftim3_a_byt3c0d3_0w0_ctftim3}', 'UMASS{pick13_umass_3133t_umass_0i_digging_gadg3t}', 'UMASS{ctftim3_buff3r_a_pwn_gam3_f1ag_th3}', 'UMASS{r3v3rsing_r3v3rsing_pwn_ctftim3_hydrat3_ctftim3_babushka}', 'UMASS{c0w_a_n0p_c0w_r3v3rsing}', 'UMASS{d0g_pwn_babushka_babushka_r0p_ram_0v3rf10w}', 'UMASS{f0brincat3_f0brincat3_music_gdb_pwn_0v3rf10w_th3}', 'UMASS{th3_gdb_pick13_n0p_quick1y_babushka}', 'UMASS{y0ur_y0ur_music_y0ur_hydrat3}', 'UMASS{1izard_pwn_k3y_hack3r_th3}', 'UMASS{m3m0ry_0v3rf10w_pyth0n_c0w_hack3r_gadg3t}', 'UMASS{f00_an_0i_hydrat3_gam3}', 'UMASS{0w0_digging_hydrat3_c_n0p_hack3r_f1ag}', 'UMASS{hack_y0ur_c13an_spi11ag3_gdb_y0ur_c13an}', 'UMASS{c0w_gdb_pyth0n_jabb3r_pwn}', 'UMASS{buff3r_1ist3rin3_f1ag_m3m0ry_r3v3rsing_byt3c0d3}', 'UMASS{jabb3r_gam3_tim3_hydrat3_d0g_k3y_f1ag}', 'UMASS{sarniqu3_byt3c0d3_hack_3133t_f0brincat3_a1r3ady}', 'UMASS{pyth0n_d0g_spi11ag3_gdb_f00_byt3c0d3}', 'UMASS{n0p_f1ag_th3_ctftim3}', 'UMASS{quick1y_th3_gadg3t_byt3c0d3}', 'UMASS{ctftim3_sarniqu3_umass_hack_music}', 'UMASS{d0g_c_0v3rf10w_wat3r_babushka}', 'UMASS{byt3c0d3_0w0_spi11ag3_buff3r_music}', 'UMASS{f00_babushka_1ist3rin3_sarniqu3_f1ag}', 'UMASS{r0p_a1r3ady_gam3_hack_byt3c0d3}', 'UMASS{tim3_f0brincat3_digging_digging}', 'UMASS{scan_r3v3rsing_gadg3t_0w0}', 'UMASS{0i_digging_pwn_1ist3rin3}', 'UMASS{umass_hack3r_gam3_f1ag_ctftim3_wat3r_1izard}', 'UMASS{pwn_m3m0ry_spi11ag3_jabb3r_spi11ag3_f0brincat3_a1r3ady}', 'UMASS{ctftim3_pyth0n_th3_n0p_gdb_byt3c0d3_hack}', 'UMASS{0w0_f0brincat3_spi11ag3_babushka_digging}', 'UMASS{m3m0ry_hydrat3_hydrat3_m3m0ry_hack3r_1izard}', 'UMASS{babushka_buff3r_th3_y0ur_3133t}', 'UMASS{sarniqu3_music_0w0_0v3rf10w}', 'UMASS{buff3r_gadg3t_jabb3r_ram_a_m3m0ry}', 'UMASS{spi11ag3_pwn_pick13_spi11ag3}', 'UMASS{0w0_digging_f1ag_c_pwn_k3y}', 'UMASS{th3_gdb_0i_d0g_0v3rf10w}', 'UMASS{wat3r_gadg3t_my_pick13_hack3r_byt3c0d3_c}', 'UMASS{gadg3t_n0p_hack_3133t_f1ag_c0w_hack3r}', 'UMASS{wat3r_f0brincat3_0w0_n0p_0i_jabb3r_f00}', 'UMASS{my_a1r3ady_gadg3t_digging_gam3_k3y_tim3}', 'UMASS{ram_scan_scan_a1r3ady_umass_jabb3r_spi11ag3}', 'UMASS{an_ram_hydrat3_f00_gam3_d0g_gdb}', 'UMASS{buff3r_n0p_pyth0n_f00}', 'UMASS{ctftim3_c0w_r3v3rsing_r0p_umass_0i_1izard}', 'UMASS{hack_f1ag_ram_d0g_babushka}', 'UMASS{hydrat3_music_gam3_c0w_babushka_y0ur_y0ur}', 'UMASS{scan_1izard_pick13_gdb_r0p}', 'UMASS{spi11ag3_quick1y_d0g_n0p_k3y}', 'UMASS{ram_gdb_gdb_th3}', 'UMASS{pyth0n_a1r3ady_buff3r_ctftim3}', 'UMASS{c0w_r0p_music_f0brincat3_3133t}', 'UMASS{babushka_babushka_gdb_gadg3t}', 'UMASS{buff3r_ram_buff3r_hydrat3_pwn_music}', 'UMASS{f1ag_n0p_r0p_n0p_buff3r}', 'UMASS{byt3c0d3_0w0_hydrat3_th3}', 'UMASS{a_d0g_gadg3t_0w0_music_quick1y}', 'UMASS{sarniqu3_3133t_ctftim3_umass_m3m0ry}', 'UMASS{r0p_f0brincat3_y0ur_r0ck}', 'UMASS{hack_umass_n0p_sarniqu3_f00_gadg3t_byt3c0d3}', 'UMASS{c_d0g_pwn_pick13_1izard_0w0_a1r3ady}', 'UMASS{c13an_y0ur_digging_tim3_quick1y_r0ck_a1r3ady}', 'UMASS{r0p_gam3_th3_scan_a_f1ag}', 'UMASS{digging_f1ag_a_pwn_c0w_r3v3rsing_m3m0ry}', 'UMASS{gadg3t_r0p_ram_gdb_sarniqu3_1ist3rin3}', 'UMASS{f0brincat3_babushka_c13an_c13an}', 'UMASS{m3m0ry_c13an_y0ur_music_buff3r_digging_jabb3r}', 'UMASS{th3_pwn_a1r3ady_ctftim3_f00_c13an_c13an}', 'UMASS{hydrat3_c13an_c_a1r3ady_pyth0n_c}', 'UMASS{d0g_c0w_my_0i_wat3r_spi11ag3_hack}', 'UMASS{a_k3y_pwn_th3_0i_c}', 'UMASS{hack_gdb_r0ck_gdb_3133t_an}', 'UMASS{r3v3rsing_k3y_umass_hack}', 'UMASS{quick1y_1izard_n0p_sarniqu3}', 'UMASS{hack_tim3_c0w_k3y_umass_m3m0ry}', 'UMASS{r0ck_buff3r_f0brincat3_tim3}', 'UMASS{n0p_r0p_gadg3t_jabb3r_hack_f1ag}', 'UMASS{pyth0n_th3_0i_r0p_digging_hack_1ist3rin3}', 'UMASS{r0p_hydrat3_c_d0g_hack}', 'UMASS{c0w_c13an_k3y_tim3_1ist3rin3_0v3rf10w}', 'UMASS{hack3r_pyth0n_hack_quick1y_a_byt3c0d3}', 'UMASS{f1ag_1izard_ctftim3_babushka_pwn}', 'UMASS{gadg3t_c_r0p_hack3r_buff3r}', 'UMASS{ram_gadg3t_y0ur_th3}', 'UMASS{c_0i_scan_r0ck}', 'UMASS{r3v3rsing_buff3r_wat3r_0w0_jabb3r_babushka}', 'UMASS{spi11ag3_a_gam3_scan}', 'UMASS{ram_c13an_hack3r_0w0_babushka_pwn}', 'UMASS{digging_ctftim3_th3_spi11ag3_my_spi11ag3}', 'UMASS{tim3_gam3_babushka_th3_an_1izard_jabb3r}', 'UMASS{an_sarniqu3_an_f0brincat3_babushka_c0w_c13an}', 'UMASS{buff3r_n0p_a1r3ady_pick13}', 'UMASS{f1ag_m3m0ry_ram_ram_y0ur_a}', 'UMASS{ram_pyth0n_byt3c0d3_d0g_f1ag}', 'UMASS{a_r0p_music_gdb}', 'UMASS{hack3r_c13an_c13an_pick13_0i_c13an_3133t}', 'UMASS{an_f00_hack_quick1y_an_0i_tim3}', 'UMASS{byt3c0d3_sarniqu3_pyth0n_3133t_c0w}', 'UMASS{d0g_pick13_th3_th3}', 'UMASS{byt3c0d3_byt3c0d3_byt3c0d3_1izard_1izard_buff3r_umass}', 'UMASS{c_buff3r_c0w_0v3rf10w_0v3rf10w}', 'UMASS{1ist3rin3_r0p_gadg3t_hack3r}', 'UMASS{spi11ag3_m3m0ry_pyth0n_gam3_buff3r}', 'UMASS{sarniqu3_digging_f00_hack_pyth0n}', 'UMASS{a1r3ady_tim3_my_r0p_f1ag_digging}', 'UMASS{hack_f00_spi11ag3_my_3133t_umass_0i}', 'UMASS{gadg3t_pwn_quick1y_my_f1ag_ctftim3}', 'UMASS{c_1izard_pwn_c_0i_gdb_babushka}', 'UMASS{a1r3ady_1izard_my_1ist3rin3_digging_gdb_byt3c0d3}', 'UMASS{a1r3ady_ctftim3_hack_n0p_ram}', 'UMASS{digging_f00_c0w_digging}', 'UMASS{spi11ag3_a_d0g_0v3rf10w_my_gadg3t}', 'UMASS{digging_c0w_scan_1ist3rin3_0v3rf10w_a1r3ady}', 'UMASS{3133t_byt3c0d3_3133t_digging}', 'UMASS{r0ck_a_pick13_y0ur_a1r3ady_pwn}', 'UMASS{buff3r_n0p_ram_buff3r_c0w_k3y}', 'UMASS{f1ag_f1ag_music_gam3_k3y}', 'UMASS{th3_k3y_0v3rf10w_ctftim3_ram_byt3c0d3_r3v3rsing}', 'UMASS{d0g_f1ag_f1ag_ctftim3}', 'UMASS{wat3r_f1ag_f00_digging_c13an_sarniqu3_buff3r}', 'UMASS{hydrat3_c_buff3r_m3m0ry_babushka_1izard_c}', 'UMASS{pyth0n_c0w_digging_0i_m3m0ry}', 'UMASS{3133t_r0ck_ctftim3_n0p}', 'UMASS{k3y_r0p_d0g_3133t_r0p_gadg3t_f0brincat3}', 'UMASS{sarniqu3_f00_jabb3r_d0g}', 'UMASS{d0g_c_0v3rf10w_gam3}', 'UMASS{tim3_buff3r_k3y_gdb_hack}', 'UMASS{1ist3rin3_gdb_m3m0ry_pwn_f1ag}', 'UMASS{n0p_m3m0ry_f1ag_scan}', 'UMASS{f1ag_umass_3133t_c0w}', 'UMASS{r0p_1ist3rin3_hydrat3_th3_hack3r_tim3_jabb3r}', 'UMASS{pwn_1ist3rin3_pwn_tim3_pwn_quick1y}', 'UMASS{c0w_pick13_quick1y_0i_a_f0brincat3_r0ck}', 'UMASS{c0w_c0w_pwn_c}', 'UMASS{k3y_r3v3rsing_r0p_music_digging_pick13_sarniqu3}', 'UMASS{pick13_music_r0p_quick1y}', 'UMASS{m3m0ry_ctftim3_m3m0ry_r0p_pyth0n_an}', 'UMASS{an_f1ag_n0p_hack3r_r0p_byt3c0d3}', 'UMASS{music_1ist3rin3_spi11ag3_f1ag_th3}', 'UMASS{r3v3rsing_r0ck_ctftim3_r0ck_r3v3rsing_quick1y_1izard}', 'UMASS{tim3_d0g_my_th3}', 'UMASS{scan_jabb3r_m3m0ry_th3_f00_sarniqu3}', 'UMASS{r0ck_1ist3rin3_pyth0n_c0w_hack}', 'UMASS{pick13_n0p_f00_c}', 'UMASS{gam3_c_1ist3rin3_f1ag}', 'UMASS{c_r3v3rsing_gadg3t_hydrat3_0w0}', 'UMASS{th3_hack3r_c13an_1izard_pick13_umass_my}', 'UMASS{k3y_f1ag_c_0w0}', 'UMASS{gadg3t_r3v3rsing_f0brincat3_y0ur}', 'UMASS{1ist3rin3_jabb3r_1izard_f1ag_ram_gdb}', 'UMASS{music_n0p_c_f1ag_1ist3rin3}', 'UMASS{r3v3rsing_f1ag_ram_pwn_gadg3t}', 'UMASS{0i_c0w_music_jabb3r_1ist3rin3_quick1y_ctftim3}', 'UMASS{f1ag_pwn_y0ur_music_0w0_umass_byt3c0d3}', 'UMASS{ram_an_3133t_pyth0n_hack}', 'UMASS{gam3_an_th3_a_pwn}', 'UMASS{a1r3ady_gam3_pyth0n_m3m0ry_1ist3rin3_umass}', 'UMASS{1ist3rin3_f1ag_r0p_1ist3rin3}', 'UMASS{buff3r_hack3r_3133t_jabb3r_tim3}', 'UMASS{spi11ag3_r3v3rsing_1izard_d0g}', 'UMASS{c13an_1ist3rin3_tim3_pyth0n}', 'UMASS{hydrat3_f00_a_gadg3t}', 'UMASS{hack3r_r3v3rsing_f1ag_gadg3t}', 'UMASS{hack_gdb_0v3rf10w_umass_d0g_gam3}', 'UMASS{tim3_a1r3ady_3133t_gam3}', 'UMASS{hack_a1r3ady_gam3_byt3c0d3_wat3r_th3_gdb}', 'UMASS{jabb3r_f0brincat3_f1ag_quick1y}', 'UMASS{music_r0p_tim3_1ist3rin3_c_1ist3rin3}', 'UMASS{1ist3rin3_hack3r_quick1y_a1r3ady}', 'UMASS{spi11ag3_babushka_sarniqu3_digging_3133t}', 'UMASS{hack3r_hack3r_babushka_hack3r_umass}', 'UMASS{pick13_tim3_y0ur_babushka}', 'UMASS{k3y_r0p_pwn_sarniqu3}', 'UMASS{1ist3rin3_jabb3r_a_0v3rf10w_y0ur_tim3}', 'UMASS{c13an_jabb3r_y0ur_umass}', 'UMASS{wat3r_babushka_3133t_buff3r_scan_th3}', 'UMASS{umass_k3y_c0w_c_tim3}', 'UMASS{c0w_pyth0n_pick13_th3_a}', 'UMASS{babushka_babushka_hydrat3_babushka_hydrat3_jabb3r}', 'UMASS{m3m0ry_music_d0g_r0p}', 'UMASS{1ist3rin3_tim3_f0brincat3_pyth0n_c0w_ram}', 'UMASS{1izard_f0brincat3_k3y_d0g_3133t_scan}', 'UMASS{sarniqu3_pick13_gam3_umass_spi11ag3_1ist3rin3}', 'UMASS{f1ag_tim3_a_hack3r_quick1y_pwn}', 'UMASS{f00_umass_f1ag_sarniqu3}', 'UMASS{music_byt3c0d3_f1ag_pwn_gadg3t_a1r3ady}', 'UMASS{tim3_gadg3t_hack_r3v3rsing_c_n0p_byt3c0d3}', 'UMASS{c_f0brincat3_1ist3rin3_buff3r_gdb_r0ck}', 'UMASS{m3m0ry_0w0_pwn_m3m0ry_c13an}', 'UMASS{n0p_c0w_ram_d0g_k3y_f0brincat3}', 'UMASS{0i_f00_ctftim3_tim3_a1r3ady_r0ck}', 'UMASS{y0ur_music_pick13_my_buff3r}', 'UMASS{f1ag_f1ag_gam3_gdb_spi11ag3_gdb_n0p}', 'UMASS{buff3r_0i_k3y_ram}', 'UMASS{babushka_jabb3r_1izard_y0ur_buff3r_spi11ag3}', 'UMASS{n0p_0w0_f1ag_1izard_ctftim3_gadg3t}', 'UMASS{pwn_babushka_k3y_k3y_c}', 'UMASS{f1ag_0v3rf10w_f1ag_gdb_pick13_c_y0ur}', 'UMASS{gam3_gam3_a1r3ady_sarniqu3_digging}', 'UMASS{m3m0ry_c13an_music_jabb3r}', 'UMASS{ctftim3_music_music_a_n0p_f0brincat3_pick13}', 'UMASS{r0ck_pwn_pyth0n_ram_quick1y_wat3r_umass}', 'UMASS{d0g_th3_0v3rf10w_hack3r_gdb_0w0}', 'UMASS{pwn_0v3rf10w_digging_tim3_digging_umass}', 'UMASS{r0p_f1ag_c_r3v3rsing_my}', 'UMASS{m3m0ry_hack3r_hack_0i}', 'UMASS{hack_0i_f1ag_f00_spi11ag3_hydrat3}', 'UMASS{y0ur_ram_0w0_k3y_c0w_y0ur}', 'UMASS{hack_0i_byt3c0d3_buff3r_hydrat3}', 'UMASS{f1ag_k3y_k3y_1ist3rin3_r0ck_1ist3rin3_m3m0ry}', 'UMASS{f0brincat3_f1ag_r0ck_f0brincat3_music_gadg3t_d0g}', 'UMASS{c13an_y0ur_f1ag_babushka}', 'UMASS{c_c13an_3133t_c13an_1ist3rin3_r3v3rsing_pwn}', 'UMASS{d0g_my_jabb3r_wat3r_m3m0ry_pick13_ctftim3}', 'UMASS{babushka_gam3_pyth0n_f1ag_hydrat3}', 'UMASS{buff3r_hydrat3_c13an_scan_a_hack3r}', 'UMASS{c0w_digging_3133t_0w0_f00_sarniqu3}', 'UMASS{hack3r_c_hack3r_digging_hydrat3}', 'UMASS{1izard_babushka_r3v3rsing_hydrat3}', 'UMASS{r0p_music_babushka_f0brincat3_th3}', 'UMASS{pyth0n_3133t_hydrat3_k3y_a_k3y}', 'UMASS{0v3rf10w_music_ram_gadg3t_c_c13an}', 'UMASS{buff3r_music_gam3_digging_f00}', 'UMASS{f1ag_music_r0ck_a1r3ady}', 'UMASS{r0p_jabb3r_f1ag_gadg3t}', 'UMASS{pick13_a1r3ady_f00_y0ur_music}', 'UMASS{m3m0ry_pwn_sarniqu3_pwn}', 'UMASS{a1r3ady_quick1y_0v3rf10w_hack_0i}', 'UMASS{y0ur_ram_th3_0i_tim3_tim3}', 'UMASS{r0p_hack_tim3_r3v3rsing_1ist3rin3_quick1y_babushka}', 'UMASS{sarniqu3_m3m0ry_r0p_n0p_pyth0n_n0p}', 'UMASS{digging_c13an_k3y_f0brincat3_quick1y_byt3c0d3_y0ur}', 'UMASS{wat3r_c0w_f0brincat3_y0ur}', 'UMASS{r3v3rsing_babushka_f1ag_pwn_scan_d0g_th3}', 'UMASS{digging_c_tim3_0w0_quick1y_f1ag}', 'UMASS{babushka_sarniqu3_babushka_babushka_digging}', 'UMASS{0w0_pyth0n_f1ag_sarniqu3_hack}', 'UMASS{byt3c0d3_hydrat3_y0ur_gam3_n0p}', 'UMASS{gdb_f1ag_0i_sarniqu3_an}', 'UMASS{byt3c0d3_d0g_sarniqu3_c}', 'UMASS{ram_quick1y_umass_buff3r_3133t_babushka_umass}', 'UMASS{sarniqu3_music_0i_digging_d0g_my_0w0}', 'UMASS{f00_y0ur_f0brincat3_r0ck_hydrat3_sarniqu3}', 'UMASS{gdb_r0p_quick1y_0v3rf10w_ctftim3_sarniqu3}', 'UMASS{ram_f00_gdb_my_r0p}', 'UMASS{f1ag_a_0i_ctftim3_wat3r_hack3r_c13an}', 'UMASS{th3_wat3r_0w0_wat3r_scan}', 'UMASS{hack3r_gdb_wat3r_hack}', 'UMASS{th3_ctftim3_scan_sarniqu3_hydrat3_buff3r_a}', 'UMASS{c0w_hydrat3_k3y_hack_k3y_music_wat3r}', 'UMASS{k3y_pyth0n_scan_umass}', 'UMASS{0v3rf10w_gdb_digging_1ist3rin3_m3m0ry}', 'UMASS{c13an_3133t_a_jabb3r_hack_0w0_buff3r}', 'UMASS{r0ck_gam3_0w0_a1r3ady_babushka_f00_f1ag}', 'UMASS{ctftim3_byt3c0d3_c0w_umass_c13an_a1r3ady_pwn}', 'UMASS{a_ctftim3_r0ck_gadg3t}', 'UMASS{gam3_gdb_buff3r_sarniqu3_pwn_my_th3}', 'UMASS{a1r3ady_scan_buff3r_babushka}', 'UMASS{0v3rf10w_an_tim3_1izard_scan_music_gdb}', 'UMASS{my_d0g_jabb3r_byt3c0d3}', 'UMASS{3133t_sarniqu3_music_pick13_m3m0ry_c}', 'UMASS{1izard_c13an_pick13_f00_scan_tim3}', 'UMASS{gam3_c0w_hack_hack_wat3r_1ist3rin3_tim3}', 'UMASS{ctftim3_f00_jabb3r_m3m0ry_r0ck}', 'UMASS{pwn_pwn_byt3c0d3_th3_hydrat3}', 'UMASS{r0p_th3_hack3r_spi11ag3_f1ag_th3}', 'UMASS{f0brincat3_pwn_jabb3r_hack3r_my}', 'UMASS{hack3r_c_c13an_digging}', 'UMASS{f1ag_hydrat3_ram_my_1izard_ram}', 'UMASS{quick1y_0v3rf10w_pwn_c0w_0w0_k3y_th3}', 'UMASS{hack_r3v3rsing_th3_hack3r}', 'UMASS{pwn_a1r3ady_pyth0n_wat3r}', 'UMASS{th3_d0g_gam3_3133t_ram_r3v3rsing_0v3rf10w}', 'UMASS{wat3r_r0ck_th3_pick13_f1ag_f1ag_buff3r}', 'UMASS{wat3r_a1r3ady_umass_buff3r_0v3rf10w_hydrat3}', 'UMASS{1ist3rin3_buff3r_r3v3rsing_c0w_ram_3133t_r3v3rsing}', 'UMASS{gadg3t_c13an_byt3c0d3_r0ck_r3v3rsing}', 'UMASS{an_music_d0g_spi11ag3_n0p_umass}', 'UMASS{sarniqu3_m3m0ry_spi11ag3_music_buff3r_a1r3ady_jabb3r}', 'UMASS{y0ur_my_f1ag_m3m0ry_wat3r_buff3r}', 'UMASS{c0w_c0w_m3m0ry_y0ur_ram_umass}', 'UMASS{an_d0g_pick13_c0w}', 'UMASS{hydrat3_hydrat3_buff3r_tim3_m3m0ry_1izard}', 'UMASS{c_umass_d0g_sarniqu3_gam3_k3y_hack3r}', 'UMASS{quick1y_byt3c0d3_ram_1ist3rin3_quick1y_an_babushka}', 'UMASS{jabb3r_gdb_m3m0ry_a_f1ag_1izard}', 'UMASS{3133t_buff3r_m3m0ry_scan_hack_c0w_wat3r}', 'UMASS{gadg3t_a1r3ady_scan_n0p_tim3}', 'UMASS{umass_gdb_an_my_pyth0n}', 'UMASS{f1ag_quick1y_f1ag_hack}', 'UMASS{wat3r_my_digging_my}', 'UMASS{byt3c0d3_scan_r0p_y0ur_0v3rf10w_1izard}', 'UMASS{k3y_babushka_scan_ctftim3_pyth0n_c}', 'UMASS{a_r3v3rsing_my_umass_wat3r}', 'UMASS{n0p_d0g_f1ag_quick1y_0w0_f0brincat3}', 'UMASS{c0w_r0p_sarniqu3_digging_r3v3rsing}', 'UMASS{f1ag_k3y_c13an_gdb_spi11ag3}', 'UMASS{m3m0ry_byt3c0d3_f1ag_pick13_hack3r_a1r3ady_quick1y}', 'UMASS{m3m0ry_r0p_1izard_music_n0p_scan}', 'UMASS{f1ag_music_pyth0n_spi11ag3_ram_jabb3r_f1ag}', 'UMASS{1izard_gdb_a1r3ady_0i}', 'UMASS{tim3_m3m0ry_0w0_0w0_m3m0ry_c13an}', 'UMASS{r3v3rsing_pwn_f00_0v3rf10w_1ist3rin3_gdb_c}', 'UMASS{gam3_hydrat3_d0g_m3m0ry_f00}', 'UMASS{gadg3t_ram_f1ag_gam3_r0p}', 'UMASS{th3_ctftim3_f1ag_r0p}', 'UMASS{jabb3r_pwn_0w0_f00_quick1y_1ist3rin3_gadg3t}', 'UMASS{y0ur_a_3133t_a_m3m0ry_wat3r}', 'UMASS{c0w_r3v3rsing_umass_quick1y}', 'UMASS{byt3c0d3_gadg3t_r3v3rsing_spi11ag3_pwn_tim3_gadg3t}', 'UMASS{f0brincat3_a1r3ady_umass_a1r3ady_byt3c0d3_spi11ag3_r3v3rsing}', 'UMASS{umass_r0p_th3_my_y0ur_k3y}', 'UMASS{0w0_gam3_gdb_hydrat3_r3v3rsing_a_byt3c0d3}', 'UMASS{f00_0i_quick1y_m3m0ry}', 'UMASS{hack_k3y_a_r3v3rsing_gadg3t}', 'UMASS{quick1y_music_my_f1ag}', 'UMASS{n0p_1ist3rin3_m3m0ry_n0p}', 'UMASS{quick1y_umass_buff3r_wat3r}', 'UMASS{gdb_digging_digging_m3m0ry_r3v3rsing_tim3_m3m0ry}', 'UMASS{pwn_3133t_digging_pyth0n_3133t_scan}', 'UMASS{gadg3t_quick1y_m3m0ry_umass_hydrat3}', 'UMASS{umass_ram_hack3r_music_f00_c13an}', 'UMASS{hydrat3_y0ur_c_f00_an_music}', 'UMASS{0i_music_k3y_f00_y0ur_0i_k3y}', 'UMASS{digging_f0brincat3_tim3_0i_r0p_0i}', 'UMASS{pwn_babushka_an_ram_a1r3ady_ctftim3}', 'UMASS{jabb3r_c_c_umass_0v3rf10w_0w0}', 'UMASS{my_c0w_umass_hack3r_umass_d0g}', 'UMASS{music_gadg3t_hydrat3_scan_m3m0ry_pyth0n}', 'UMASS{f0brincat3_byt3c0d3_hack3r_gam3_r3v3rsing_hydrat3}', 'UMASS{hack_d0g_f0brincat3_hack}', 'UMASS{k3y_0w0_n0p_a1r3ady}', 'UMASS{buff3r_buff3r_tim3_0v3rf10w}', 'UMASS{c13an_spi11ag3_hack_tim3_f00_music}', 'UMASS{r3v3rsing_f1ag_spi11ag3_th3_music}', 'UMASS{1izard_quick1y_a1r3ady_f0brincat3_an}', 'UMASS{pyth0n_quick1y_pwn_n0p_r0p_n0p}', 'UMASS{c_sarniqu3_th3_gdb_gam3_d0g}', 'UMASS{m3m0ry_scan_d0g_pwn_0v3rf10w_c}', 'UMASS{gadg3t_r3v3rsing_0w0_a1r3ady}', 'UMASS{r0p_a_1ist3rin3_d0g_c0w}', 'UMASS{hydrat3_hack_1izard_hack3r_n0p_r3v3rsing_hydrat3}', 'UMASS{digging_0w0_gdb_1ist3rin3_m3m0ry}', 'UMASS{byt3c0d3_0v3rf10w_r0ck_byt3c0d3_c}', 'UMASS{a1r3ady_music_tim3_pick13_y0ur}', 'UMASS{f1ag_gdb_hack3r_c0w_digging_ram}', 'UMASS{hydrat3_a1r3ady_digging_pyth0n_k3y_buff3r}', 'UMASS{babushka_c13an_a_hack}', 'UMASS{n0p_byt3c0d3_a1r3ady_digging}', 'UMASS{r3v3rsing_f1ag_r0ck_an_0w0}', 'UMASS{a1r3ady_pick13_hack3r_n0p_c13an_jabb3r_umass}', 'UMASS{0i_ram_n0p_sarniqu3_r3v3rsing_gdb_k3y}', 'UMASS{pick13_byt3c0d3_scan_wat3r_gam3_3133t}', 'UMASS{umass_k3y_f00_gam3_spi11ag3_an_k3y}', 'UMASS{ctftim3_0w0_hack_c0w_a1r3ady_n0p_c0w}', 'UMASS{0w0_spi11ag3_pick13_3133t_wat3r_pwn}', 'UMASS{ram_buff3r_0v3rf10w_pick13_gam3_m3m0ry_d0g}', 'UMASS{wat3r_pwn_0i_buff3r_ctftim3_1ist3rin3_gadg3t}', 'UMASS{1ist3rin3_sarniqu3_n0p_ram_quick1y}', 'UMASS{0w0_a1r3ady_digging_r0p}'] diff --git a/babushka/gen.py b/babushka/gen.py new file mode 100644 index 0000000..0168353 --- /dev/null +++ b/babushka/gen.py @@ -0,0 +1,266 @@ +# UMASS{th3_spi11ag3_byt3c0d3_ctftim3_hack} + +import types +import pickle +import random +import string + +from flags import FLAGS + + +# Code type stuff + +def serialize_function(f): + return pickle.dumps([ + f.__code__.co_argcount, + f.__code__.co_posonlyargcount, + f.__code__.co_kwonlyargcount, + f.__code__.co_nlocals, + f.__code__.co_stacksize, + f.__code__.co_flags, + f.__code__.co_code, + f.__code__.co_consts, + f.__code__.co_names, + tuple([var_name() for _ in f.__code__.co_varnames]), + "<OwOwhatsthis>", + fn_name(),# f.__code__.co_name, + 42069666, + f.__code__.co_lnotab, + f.__code__.co_freevars, + f.__code__.co_cellvars +]) + +def deserialize_function(encoded): + return types.FunctionType(types.CodeType(*pickle.loads(encoded)), globals()) + + +# Symbolic obfuscation. This code for generating flags actually isn't used; I +# used the REPL to generate my thousand flags and hard-coded it into `flags.py`. + +# >>> gen_flag() +# 'UMASS{th3_spi11ag3_byt3c0d3_ctftim3_hack}' +# >>> >>> gen_flag() +# 'UMASS{an_umass_wat3r_music_sarniqu3_m3m0ry_babushka}' +# >>> gen_flag() +# 'UMASS{a1r3ady_digging_scan_pick13_m3m0ry_buff3r_gam3}' + +dic = [ + "python", + "babushka", + "pickle", + "flag", + "umass", + "hack", + "hacker", + "pwn", + "oi", + "the", + "a", + "time", + "already", + "quickly", + "lizard", + "sarnique", + "c", + "overflow", + "buffer", + "rop", + "gadget", + "reversing", + "flag", + "key", + "eleet", + "spillage", + "listerine", + "clean", + "bytecode", + "nop", + "ram", + "memory", + "gdb", + "scan", + "game", + "cow", + "dog", + "fobrincate", + "foo", + "digging", + "owo", + "ctftime", + "water", + "hydrate", + "jabber", + "music", + "rock", + "an", + "your", + "my", +] + +def elite_speak(word): + leet_word = word.replace("e","3") + leet_word = leet_word.replace("E","3") + leet_word = leet_word.replace("l","1") + leet_word = leet_word.replace("L","1") + leet_word = leet_word.replace("o","0") + leet_word = leet_word.replace("O","0") + return leet_word + +def gen_flag(): + return "UMASS{" + elite_speak("_".join(random.choices(dic, k=random.randrange(4, 8)))) + "}" + +def fn_name(): + return ''.join(random.choices(string.ascii_uppercase, k=20)) + +def var_name(): + return ''.join(random.choices(string.ascii_uppercase, k=10)) + + +# Code obfuscation. It isn't particularly sophisticated. Basically, we +# - Generate some "conditions", which involve some bitwise comparison of parts +# of the input. +# - Randomize the order. +# - Randomly intersperse code that does nothing. + +def make_xor_cond(n, c): + c = ord(c) + up = c & 0b11110000 + lo = c & 0b00001111 + return " b = b and (((ord(s[{n}]) & 0xf0) ^ {up} == 0) and ((ord(s[{n}]) & 0x0f) ^ {lo} == 0))".format(n = n, up = up, lo = lo) + +def make_equals_cond(n, c): + c = ord(c) + return " b = b and (ord(s[{n}]) == {c})".format(n = n, c = c) + +def make_shift_cond(n, c): + c = ord(c) + return " b = b and ((((ord(s[{n}]) & 0b10000000) >> 7) == {a}) and (((ord(s[{n}]) & 0b01000000) >> 6) == {b}) and (((ord(s[{n}]) & 0b00100000) >> 5) == {c}) and (((ord(s[{n}]) & 0b00010000) >> 4) == {d}) and (((ord(s[{n}]) & 0b00001000) >> 3) == {e}) and (((ord(s[{n}]) & 0b00000100) >> 2) == {f}) and (((ord(s[{n}]) & 0b00000010) >> 1) == {g}) and (((ord(s[{n}]) & 0b00000001) >> 0) == {h}))".format( + n = n, + a = (c & 0b10000000) >> 7, + b = (c & 0b01000000) >> 6, + c = (c & 0b00100000) >> 5, + d = (c & 0b00010000) >> 4, + e = (c & 0b00001000) >> 3, + f = (c & 0b00000100) >> 2, + g = (c & 0b00000010) >> 1, + h = (c & 0b00000001) >> 0, + ) + +def random_cond(n, c): + i = random.randrange(0, 3) + if i == 0: + return make_xor_cond(n, c) + elif i == 1: + return make_equals_cond(n, c) + elif i == 2: + return make_shift_cond(n, c) + +def benign_action(): + i = random.randrange(0, 6) + if i == 0: + return " i = {}".format(random.randint(0, 69)) + if i == 1: + return " c = ord('{}') ^ ord(s[0])".format(random.choice(string.ascii_letters)) + if i == 2: + return " if ord(s[0]) & 0xf0 == {}:\n i = {}\n else:\n i = {}".format(random.randint(0, 47), random.randint(0, 69), random.randint(0, 69)) + if i == 3: + return " copy.copy(s)" + if i == 4: + return " i = len(s)" + if i == 5: + return " if s[:5] != \"UMASS\":\n return [False]" + +FUNCTIONS = [] +ENTRYFN = None + +def gen_fn(i): + global ENTRYFN + flag = FLAGS[i - 1] + conditions = [random_cond(i, c) for (i, c) in enumerate(flag)] + end = " b = [b]" + if i > 1 and i % 4 == 1: + end += "\n b = {}(s) + b".format(str(FUNCTIONS[i - 2])) + elif i > 1: + end += "\n t = types.FunctionType(types.CodeType(*pickle.loads({})), globals())\n b = t(s) + b".format(str(FUNCTIONS[i - 2])) + combiner = " return b" + if i == 25: + combiner = " combiner = {}\n combiner = types.FunctionType(types.CodeType(*pickle.loads(combiner)), globals())\n return [combiner(b)]".format(str(serialize_function(exactlyfourteenth_combiner))) + elif i % 25 == 0: + combiner = " combiner = {}\n combiner = types.FunctionType(types.CodeType(*pickle.loads(combiner)), globals())\n return [combiner(b)]".format(str(serialize_function(any_combiner))) + realcode = conditions + [benign_action() for _ in range(random.randrange(0, 13))] + fname = fn_name() + source_code = """ +def {fname}(s): + b = True +{code} +{end} +{combiner} +""".format( + fname = fname, + code = "\n".join(random.sample(realcode, len(realcode))), + end = end, + combiner = combiner +) + try: + exec(source_code) + except Exception: + print(source_code) + raise "shit" + if i % 4 == 1: + print(source_code) + ENTRYFN = fname + if i % 4 == 0: + print(source_code) + FUNCTIONS.append(fname) + else: + FUNCTIONS.append(serialize_function(eval(fname))) + return serialize_function(eval(fname)) + +# n.b. this is renamed to any_combiner in the pickled constants +def exactlyfourteenth_combiner(bools): + if len(bools) < 14: + return False + bools[13] = False if bools[13] else True + code = b'\x80\x04\x95\xbd\x00\x00\x00\x00\x00\x00\x00]\x94(K\x01K\x00K\x00K\x04K\x03KCC4d\x01}\x01|\x00D\x00]\x0c}\x02|\x01o\x12|\x02}\x01q\x08d\x02}\x03|\x00D\x00]\x0c}\x02|\x03|\x02O\x00}\x03q\x1e|\x01p2|\x03S\x00\x94N\x88\x89\x87\x94)(\x8c\nHMVDMTSAVI\x94\x8c\nBJWZRDQNFU\x94\x8c\nPPTMEAHGII\x94\x8c\nYRIMPWUSDG\x94t\x94\x8c\x0e<OwOwhatsthis>\x94\x8c\x0cany_combiner\x94J\xa2\xee\x81\x02C\x0e\x00\x01\x04\x01\x08\x01\n\x01\x04\x01\x08\x01\n\x01\x94))e.' + combiner = types.FunctionType(types.CodeType(*pickle.loads(code)), globals()) + return not combiner(bools) + +# n.b. only used in the constant code above +def any_combiner(bools): + b = True + for bp in bools: + b = b and bp + c = False + for bp in bools: + c |= bp + return (b or c) + +def any_combiner(bools): + b = True + for bp in bools: + b = b and bp + c = False + for bp in bools: + c |= bp + return ((b or c) and False) or bools[0] + +if __name__ == "__main__": + print("import copy") + print("import pickle") + print("import types") + for i in range(1, 501): + gen_fn(i) + print(""" +def check_key(s): + return {}(s.ljust(128)) + +if __name__ == "__main__": + key = input("Oi, babushka, what's the key? ") + combiner = types.FunctionType(types.CodeType(*pickle.loads(b'\\x80\\x04\\x95\\xcc\\x00\\x00\\x00\\x00\\x00\\x00\\x00]\\x94(K\\x01K\\x00K\\x00K\\x04K\\x03KCC@d\\x01}}\\x01|\\x00D\\x00]\\x0c}}\\x02|\\x01o\\x12|\\x02}}\\x01q\\x08d\\x02}}\\x03|\\x00D\\x00]\\x0c}}\\x02|\\x03|\\x02O\\x00}}\\x03q\\x1e|\\x01s4|\\x03r8d\\x02p>|\\x00d\\x03\\x19\\x00S\\x00\\x94(N\\x88\\x89K\\x00t\\x94)(\\x8c\\nOUVCHXMRZO\\x94\\x8c\\nGDOZHYKENT\\x94\\x8c\\nTZCLOUEGVM\\x94\\x8c\\nMMBJDKSFLR\\x94t\\x94\\x8c\\x0e<OwOwhatsthis>\\x94\\x8c\\x0cany_combiner\\x94J\\xa2\\xee\\x81\\x02C\\x0e\\x00\\x01\\x04\\x01\\x08\\x01\\n\\x01\\x04\\x01\\x08\\x01\\n\\x01\\x94))e.')), globals()) + + if combiner(check_key(key)): + print("Yes!") + else: + print("No!") + """.format(ENTRYFN)) + |