📝
zw2020 CTF Writeup
  • Virtual ZeekWeek 2020 CTF
  • Writeup
    • wiat-wat
    • Vector Fun
    • sudo su
    • RDP Authentication
    • Man or Machine?
    • Hash Yourself
    • Friendly Package
    • Fly Off The Handle
    • Write Your Own Simpson
    • Check Your Alignment
    • Backdoored Source
Powered by GitBook
On this page

Was this helpful?

  1. Writeup

Backdoored Source

PreviousCheck Your Alignment

Last updated 4 years ago

Was this helpful?

So find the bug in the zeek source version release/2.0. They provide a tampered zip file of the source.

Zeek repo lives here

The original source tag here

The Solution

scripts/base/protocols/conn/main.bro

Clone that tag down. I used to do a folder diff on the sourcetree. Uh oh whats up with that file I wonder.

beyond compare
https://github.com/zeek/zeek
https://github.com/zeek/zeek/releases/tag/v2.0