Below is the original instructions included with the PwnAdventureZ challenge. Each description, point, and total solves from the final scoreboard is also included in the original text files.
Welcome to Pwn Adventure Z! The latest iteration of the Pwn Adventure Series (http://pwnadventure.com/).
READ CAREFULLY, PLEASE!
For CSAW 2015, a special retro-edition of Pwn Adventure was created combining some modern gaming concepts on an antique platform. After all, it's the 30th anniversary of Mario -- what better way than to celebrate with an NES style PwnAdventure game!
For this challenge, you will find the enclosed files helpful. The .nl files are debug symbol files that can be used by the FCEUX Emulator and Binary Ninja (https://vector35.com/csaw). Note that only the Windows version of FCEUX supports debugging unfortunately. The .map file is created by the assembler/compiler and was used to create the .nl files.
As to the game itself, there are seven challenges in it. The first can be solved using only the files included here, the next six are all only solvable if you play the game on one of the physical NES systems set up in the CTF room. The flags are clearly identified in the game by their format, usually something like "THE FLAG IS FLAGGOESHERE".
DO NOT LOOK FOR FLAGS IN THE HARD OR APOCALYPSE MODES! Those game modes are purely for your enjoyment in playing the game later. While it's possible we have a flaw only available from there that enables getting flags, it's unlikely and we encourage you to focus on the easy mode that contains all the intended solutions.
- Points - Category - Name (Description)
- 25 - Forensics - GreetingsEarthling (Only challenge included in the ROM file)
- 25 - GamePlay - CreditForCredits (Get to the credits)
- 150 - RE - HiddenCave (Finding it is the challenge!)
- 250 - RE/GameHacking - QuarantineBreaker (Enter the boarded up house)
- 250 - RE - BLOX (Cave in the NW Corner of the Map)
- 400 - Exploitation - get_flag (What it says in the name)
- 500 - Exploitation - memory_disclosure_flag (Harder than get_flag)
Good luck.
-Vector 35 and the CSAW CTF organizers
![[ICO]](/indices/icons/blank.gif){kind=icon} | Name | Last modified | Size | Description |
|---|---|---|---|---|
![[PARENTDIR]](/indices/icons/back.png){kind=icon} | Parent Directory | - | ||
![[TXT]](/indices/icons/text.png){kind=icon} | blox.txt | 2015-11-15 04:05 | 140 | |
| creditforcredits.txt | 2015-11-15 04:03 | 148 | |
| get_flag.txt | 2015-11-15 04:05 | 142 | |
| greetingsearthling.txt | 2015-11-15 04:03 | 154 | |
| hiddencave.txt | 2015-11-15 04:05 | 146 | |
| memory_disclosure_flag.txt | 2015-11-15 04:06 | 151 | |
![[ ]](/indices/icons/compressed.gif){kind=icon} | PwnAdventureZ_4dd76ae148461e47883790c3b56c7eae.zip | 2015-11-13 00:29 | 137K | |
| quaratinebreaker.txt | 2015-11-15 04:05 | 153 |