Guild icon
Project Sekai
🔒 UMDCTF 2023 / ✅-rev-counter-strike-global-offensive-aimbot
Avatar
Sutx BOT 04/28/2023 3:00 PM
Counter-Strike: Global Offensive (Aimbot) - 500 points
Category: Rev Description: Since Jacob wasn't very good at the popular FPS game Counter Strike, he decided to purchase an aimbot from a shady Russian developer! However, it seems to be doing something weird to his game. Can you figure out what it's doing? (CS:GO is not required for this challenge, but you can download it for free on Steam) Note: If you decide to actually use this challenge in CS:GO, remember to start CS:GO with the "-insecure" flag or you risk getting banned from the game! Author: Assgent Files:Tags: No tags.
04/28/2023 3:00 PM
Sutx pinned a message to this channel. 04/28/2023 3:00 PM
Avatar
Sutx BOT 04/28/2023 3:10 PM
@Iyed wants to collaborate 🤝
Avatar
Sutx BOT 04/28/2023 3:34 PM
@Violin wants to collaborate 🤝
15:34
@afterworld wants to collaborate 🤝
Avatar
afterworld 04/28/2023 4:11 PM
ok
16:11
i dont see anything "sus"
Avatar
Sutx BOT 04/28/2023 4:28 PM
@Legoclones wants to collaborate 🤝
Avatar
Iyed 04/28/2023 4:28 PM
I guess if we just get all the vectors then draw them on a plan we will get the flag
Image attachment
16:28
Image attachment
Avatar
Legoclones 04/28/2023 4:28 PM
Hint 1: It looks like the shady Russian developer accidentally leaked some of his source code: https://pastebin.com/3ZTQC6wc Hint 2: If you try to run this aimbot, consider patching the game title and its offsets!
Source (Partial).cpp - Pastebin.com
Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time.
Avatar
afterworld 04/28/2023 4:29 PM
LMFAO
16:30
this is a funny ass chall
16:32
we need to get these offsets
16:32
#define m_dwBoneMatrix 0x26A8 #define m_iTeamNum 0xF4 #define m_iHealth 0x100 #define m_vecOrigin 0x138
16:32
dwlocalplayer entity list and viwe matrix i have
16:32
annd also dormant
16:34
#define dwLocalPlayer 0xDEA964 //Pay attention to these offsets! They might change with game updates... #define dwEntityList 0x4dfffb4 #define dwViewMatrix 0x4df0de4 #define m_dwBoneMatrix 0x26A8 #define m_iTeamNum 0xF4 #define m_iHealth 0x100 #define m_vecOrigin 0x138 #define m_bDormant 0xED
16:34
updated offsets
16:34
should be able to run and inject into CS
16:35
after compiling
16:35
or do they want us to bytepatch?
16:35
and im assuming
16:35
the aimbot will draw out the flag (edited)
Avatar
afterworld 04/28/2023 4:54 PM
// 2023-02-03 18:37:44.965093600 UTC
16:54
10465897
Avatar
afterworld 04/28/2023 5:23 PM
my cs download almost done
👍 1
Avatar
afterworld 04/28/2023 6:15 PM
ok now i got the aimbot to work
18:15
im pretty sure its tryna drawg flag
18:15
but
18:15
my resolution is shit
Avatar
Legoclones 04/28/2023 6:15 PM
😂
Avatar
afterworld 04/28/2023 6:15 PM
or the aimbot is just shit
Avatar
sahuang 04/28/2023 6:16 PM
draw its positions?
Avatar
afterworld 04/28/2023 6:16 PM
its hella weird
Avatar
sahuang 04/28/2023 6:17 PM
like record it and draw urself
Avatar
afterworld 04/28/2023 6:19 PM
its so shit
Avatar
afterworld 04/28/2023 6:34 PM
its so weird
18:34
the "aimbot" functions should aim at those places
18:34
right
18:34
it should aim at the predefined targets
18:34
need someone to confirm pls
Avatar
sahuang 04/28/2023 6:35 PM
ask admin ig
Avatar
afterworld 04/28/2023 6:35 PM
admin prob wont say shit
Avatar
sahuang 04/28/2023 6:35 PM
why
18:35
confirm a lot for us
18:35
they
18:35
like they do sanity checks
Avatar
afterworld 04/28/2023 6:36 PM
o
18:36
ok then ill ask
Avatar
Sutx BOT 04/28/2023 6:48 PM
@jayden wants to collaborate 🤝
Avatar
afterworld 04/28/2023 6:53 PM
k
18:53
so shitty mouse not moving
18:53
bruh
18:53
tryna think
18:53
it is "shooting" every 200 ms tho
18:54
o fuck im stupid i think
18:54
its toggle bruh (edited)
18:55
this IDA decomp looks so bad
Avatar
afterworld 04/28/2023 7:27 PM
ok bro
19:27
apparently i didnt have vcredist
19:27
so SetCursorPos was not working
19:27
installing that shit now
19:27
and now hopefully should work
Avatar
sahuang 04/28/2023 7:29 PM
pray
Avatar
Sutx BOT 04/28/2023 8:43 PM
@fleming wants to collaborate 🤝
Avatar
Sutx BOT 04/28/2023 9:03 PM
@hfz wants to collaborate 🤝
Avatar
hfz 04/28/2023 9:05 PM
I'm on phone, but if it draws the flag, can't we just reconstruct it without having to run it?
Avatar
Avatar
afterworld
my resolution is shit
sahuang 04/28/2023 9:06 PM
^
Avatar
afterworld 04/28/2023 9:07 PM
nah it stopped working
21:07
idk what happened
21:07
like before it would actually move the mouse
21:07
and then spaz out
21:07
now it wont even move
21:07
if someone wants to continue off of where i left off, my approach was getting older version of CS where the offsets matched and injected the cheat in there (edited)
Avatar
hfz 04/28/2023 9:08 PM
https://github.com/frk1/hazedumper
GitHub - frk1/hazedumper: up to date csgo offsets and hazedumper co...
up to date csgo offsets and hazedumper config. Contribute to frk1/hazedumper development by creating an account on GitHub.
Thumbnail
21:08
this contains up to date offsets
Avatar
afterworld 04/28/2023 9:08 PM
we cant update cheat
21:08
unless we bytepatch
21:08
and yes i know
Avatar
hfz 04/28/2023 9:08 PM
ah ok
Avatar
afterworld 04/28/2023 9:08 PM
i didnt wanna bytepatch
21:09
so i was thinking why not downgrade to older version of CS where everything matches
21:09
so i looked at haze dumper history
Avatar
hfz 04/28/2023 9:09 PM
I see
Avatar
afterworld 04/28/2023 9:09 PM
https://github.com/frk1/hazedumper/commit/66473d0c4b2c037a79ad3137c455e3fa83a3a754
📦 Game Update 03.02.2023 (105.9 MB) · frk1/hazedumper@66473d0
Thumbnail
21:09
this one has the right offsets
Avatar
hfz 04/28/2023 9:09 PM
should be doable statically though, I'll look at the source later
Avatar
afterworld 04/28/2023 9:09 PM
but for some reason even after injecting no luck
21:09
yeah prob static is the way to go now
21:09
idk what im doing wrong
21:10
cuz even window title matches
Avatar
hfz 04/28/2023 9:10 PM
but wait
21:10
this aimbot ain't doing aimbot stuff
21:10
it's not modifying the local player angle
21:11
it's just moving the mouse, depends on the resolution which sucks
21:11
so from what I understand, targets vectors are not in game x, y, z positions of the targets
21:12
just 0, x, y where x and y are screen coordinates, right?
Avatar
afterworld 04/28/2023 9:19 PM
yes
21:19
its such a shitty impl
21:20
for (int i = 0; i < sizeof(targets) / sizeof(Vector3) && GetAsyncKeyState(VK_DELETE); i++) { Vector3 target = WorldToScreen(Vector3(reference.x + targets[i].x, reference.y + targets[i].y, reference.z + targets[i].z), vm); SetCursorPos(target.x, target.y); Shoot(); Sleep(200);
Avatar
hfz 04/28/2023 9:21 PM
it doesn't go back to initial local player mouse position after shooting?
21:21
it keeps transitioning from target to target?
Avatar
afterworld 04/28/2023 9:21 PM
yeah
21:21
why would it go back to initial
21:21
its drawing flag
Avatar
hfz 04/28/2023 9:21 PM
like, it flicks or smth
Avatar
afterworld 04/28/2023 9:21 PM
nah no flick
Avatar
hfz 04/28/2023 9:22 PM
can someone post exe here
21:24
nvm i'll just use pjsk account to download
Avatar
sahuang 04/28/2023 9:24 PM
create ur own accnt
Avatar
Avatar
Sutx
Click to see attachment 🖼️
sahuang 04/28/2023 9:24 PM
actually file link is here
Avatar
hfz 04/28/2023 9:25 PM
it didn't work
Avatar
Avatar
sahuang
create ur own accnt
hfz 04/28/2023 9:25 PM
i'll create one later, just wanted to download the cheat
Avatar
sahuang 04/28/2023 9:25 PM
kk
Avatar
hfz 04/28/2023 9:27 PM
did we dump all the vectors yet?
Avatar
afterworld 04/28/2023 9:28 PM
no if all vectors r dumped then ez flag
Avatar
hfz 04/28/2023 9:31 PM
i have a dank idea on how to do it
21:31
we have initial vectors, so it's easy with cheat engine
21:32
i just patched the sleep to be way longer, then we'll use ReClass to see the vectors nicely
Avatar
afterworld 04/28/2023 9:43 PM
aight
Avatar
hfz 04/28/2023 9:48 PM
(0.0, 600.0, 200.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -40.0, 50.0) (0.0, -40.0, 50.0) (0.0, 600.0, 0.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -70.0, 0.0) (0.0, 70.0, 0.0) (0.0, -40.0, 50.0) (0.0, 20.0, 30.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, 100.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -60.0, 0.0) (0.0, 60.0, 0.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, 80.0, 0.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -70.0, 0.0) (0.0, 70.0, 0.0) (0.0, -40.0, 50.0) (0.0, -20.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0)
21:49
paint.exe time
Avatar
sahuang 04/28/2023 9:52 PM
anyone doing
Avatar
hfz 04/28/2023 9:52 PM
i'm on it
Avatar
sahuang 04/28/2023 9:52 PM
i can use matplotlib to plot real quick
21:52
k
Avatar
hfz 04/28/2023 9:52 PM
paint is more dank
😂 1
Avatar
sahuang 04/28/2023 9:52 PM
or turtle
🐢 1
Avatar
hfz 04/28/2023 10:29 PM
I'll get back to it tomorrow if it's still unsolved (edited)
22:30
we can't use the coordinates without converting from world to screen (x, y)
22:30
to do that, we need the game's viewmatrix
22:31
an easy way to do it dynamically would be to hook SetCursorPos or patch the binary so it prints the parameters to that function, those would be the x, y we're looking for (edited)
Avatar
hfz 04/28/2023 10:40 PM
i have an alternative idea actually
Avatar
Sutx BOT 04/29/2023 5:39 AM
@TheBadGod wants to collaborate 🤝
Avatar
TheBadGod 04/29/2023 5:46 AM
i don't think this spells out anything too interesting
05:46
like these are all offsets from the same point and they look kinda too close to actually spell something (with the outliers of 600, 200)
Avatar
TheBadGod 04/29/2023 6:09 AM
non-cumulative shots (many are hit multiple times)
Image attachment
06:09
cumulative
Image attachment
Avatar
afterworld 04/29/2023 6:30 AM
maybe its meant for a certain weapons spray and recoil?
Avatar
hfz 04/29/2023 8:12 AM
it's the exact same pattern that I got
08:13
it's weird that some subsequent vectors are equal, like the aimbot shoots more than once in the same spot, not useful for drawing out the flag
Avatar
TheBadGod 04/29/2023 8:22 AM
if we want the shot positions we need to negate x/y anyway
08:24
but yeah shooting the same place multiple times does not make sense
08:24
and i don't think the matrix suddenly changes, considering this should be a very quick burst
08:27
nvm we add to the target vector and not the amount to move the mouse
Avatar
hfz 04/29/2023 8:32 AM
since the mouse position doesn't reset to the initial state, I think even if 2 subsequent vectors are the same, they'll yied different screen coordinates
08:32
hooking SetCursorPos is the fastest way to solve ig
Avatar
Avatar
hfz
since the mouse position doesn't reset to the initial state, I think even if 2 subsequent vectors are the same, they'll yied different screen coordinates
TheBadGod 04/29/2023 8:33 AM
yeah because we don't read memory again
Avatar
Avatar
TheBadGod
cumulative
TheBadGod 04/29/2023 8:34 AM
but like that gives me this thing
08:40
https://www.unknowncheats.me/forum/counterstrike-global-offensive/154087-world-screen-help-cs.html has some values we could try to use
World To Screen Help CS:GO
Hi I'm new to writing hacks for CS:GO, and C++ for that matter (Pascal and Java is what I coded in). I've gotten everything up to this point, but I am...
Thumbnail
08:41
the "You are missing the inversed part." seems to have the function we see, maybe
Avatar
hfz 04/29/2023 8:47 AM
the thing that's confusing me is, how does the WorldToScreen function work without needing the local player view angle? yaw + pitch
08:47
you could be in the same position, but depending on the view angle, the screen coordinates would be different
Avatar
TheBadGod 04/29/2023 8:49 AM
the view matrix?
08:50
i mean that's also read
08:50
vm = RPM<view_matrix_t>(moduleBase + dwViewMatrix);
Avatar
hfz 04/29/2023 8:50 AM
I thought the view matrix is a constant
08:50
that's used to convert world coordinates to screen coordinates
08:50
apparently it changes when the player's view angle changes?
Avatar
TheBadGod 04/29/2023 8:51 AM
it is not, but in this aimbot it is only read after each burst
Avatar
hfz 04/29/2023 8:51 AM
I see
Avatar
TheBadGod 04/29/2023 8:51 AM
just like the head position
Avatar
hfz 04/29/2023 9:19 AM
can you tell x32dbg to break at a certain function call then log the parameters to that function? like in gdb
09:19
never did x32dbg scripting
Avatar
TheBadGod 04/29/2023 9:20 AM
sorry, i don't even work on windows, so idk
Avatar
hfz 04/29/2023 9:20 AM
xD
09:20
how do you reverse windows binaries?
09:20
just statically I guess?
Avatar
TheBadGod 04/29/2023 9:20 AM
yes
Avatar
hfz 04/29/2023 9:20 AM
🐐
Avatar
TheBadGod 04/29/2023 9:21 AM
and i mean in this case the binary is reversed; and considering they state that we don't cs:go, i assume it's just interpreting the numbers correctly
Avatar
hfz 04/29/2023 9:21 AM
yeah, I wanted to verify something still
Avatar
TheBadGod 04/29/2023 9:21 AM
fair
Avatar
hfz 04/29/2023 9:22 AM
because 2 equal vectors one after another doesn't make much sense
Avatar
TheBadGod 04/29/2023 9:22 AM
yeah, true
Avatar
hfz 04/29/2023 9:26 AM
so we can say that the screen coordinates are calculated ahead of time (for all targets), then the mouse starts moving to those positions, right? since it only reads the viewmatrix once if that's the case, suppose we have 2 subsequent targets with Vector3(0, x, y) at the top left corner of the screen (0, 0), the parameters passed to SetCursorPos are (0, 0) for both of these targets, but: when we move the mouse to the first target, the 2nd target no longer stands at (0, 0), it's in the middle of the screen, but still, the aimbot will try to shoot at the top left corner of the screen not sure how to interpret this huh
Avatar
sahuang 04/29/2023 3:08 PM
@hfz does the dll work
Avatar
Avatar
hfz
can you tell x32dbg to break at a certain function call then log the parameters to that function? like in gdb
afterworld 04/29/2023 3:21 PM
ollydbg
15:22
x32dbg can also prob do
Avatar
sahuang 04/29/2023 3:22 PM
this seems the only one w more solves, got 4
Avatar
Sutx BOT 04/29/2023 3:28 PM
@joezid wants to collaborate 🤝
Avatar
afterworld 04/29/2023 7:16 PM
has anyone gotten "aimbot" to work in game?
Avatar
sahuang 04/29/2023 7:17 PM
@hfz did
19:17
but not working cuz resolution
Avatar
afterworld 04/29/2023 7:18 PM
ya same
19:18
did u use older csgo version? @hfz
19:18
or did u patch the binary with new offsets (edited)
19:22
wtf
19:22
u know whats weird
19:22
when i alt tab
19:22
it actually does shit
19:22
alt tab and hold delete
19:22
idk why
Avatar
afterworld 04/29/2023 7:35 PM
ok wait im stupid
19:35
setcursorpos shouldnt work in cs
19:36
such trashy impl of aimbot
Avatar
hfz 04/29/2023 7:36 PM
it works when you disable raw mouse input
19:36
I patched the binary with new offsets
Avatar
afterworld 04/29/2023 7:37 PM
yeah
19:37
i just tried that
Avatar
hfz 04/29/2023 7:37 PM
still, the (x, y) don't make sense, doesn't seem like drawing a flag
19:38
I dumped the parameters passed to SetCursorPos just to avoid dealing with the viewmatrix, but they didn't make sense for some reason
19:38
some of them negative
Avatar
afterworld 04/29/2023 7:38 PM
lmao
19:38
so i didnt patch binary
Avatar
hfz 04/29/2023 7:38 PM
I wonder if my viewmatrix offset is wrong
Avatar
afterworld 04/29/2023 7:38 PM
i just used older version of CS
Avatar
hfz 04/29/2023 7:38 PM
xd
Avatar
afterworld 04/29/2023 7:38 PM
whats ur veiwmatrix
19:38
for latest version of cs?
Avatar
hfz 04/29/2023 7:39 PM
I think it stayed the same as the one in the binary
19:39
only localplayer changed
Avatar
afterworld 04/29/2023 7:39 PM
think thats wrong
19:39
what does the aimbot do for u
Avatar
hfz 04/29/2023 7:39 PM
but it could be that there was an update after the last commit on hazedumper offsets
Avatar
afterworld 04/29/2023 7:39 PM
hazedumper is auto
Avatar
hfz 04/29/2023 7:39 PM
ah ok
Avatar
afterworld 04/29/2023 7:40 PM
0x4df0de4
19:40
this is viewmatrix for latest cs
Avatar
hfz 04/29/2023 7:40 PM
yeah, I picked it from the repo
Avatar
Avatar
afterworld
what does the aimbot do for u
hfz 04/29/2023 7:40 PM
moves the mouse and shoots
Avatar
afterworld 04/29/2023 7:41 PM
ok let me send u a vid
Avatar
afterworld 04/29/2023 7:58 PM
https://streamable.com/kjx4w3
19:58
does urs do the same thing
Avatar
Legoclones 04/29/2023 8:03 PM
dang homeboy goes all over the place
Avatar
afterworld 04/29/2023 8:04 PM
yeah very good aimbot
😂 1
Avatar
sahuang 04/29/2023 8:05 PM
lol wtf
Avatar
afterworld 04/29/2023 8:06 PM
i know
20:06
thats why im confused
Avatar
sahuang 04/29/2023 8:06 PM
did admin confirm its right
Avatar
afterworld 04/29/2023 8:06 PM
o lemme ask admin
20:10
YES
Image attachment
20:10
YES
20:10
YES
20:10
YES
20:10
FUCK YES
Avatar
sahuang 04/29/2023 8:10 PM
i still cant see msg
Avatar
afterworld 04/29/2023 8:10 PM
I CANT EITHER
😂 2
20:11
BUT hes said its right
20:13
guys this is flag
Image attachment
😂 2
Avatar
sahuang 04/29/2023 8:13 PM
he said this is?
20:13
wtf
Avatar
afterworld 04/29/2023 8:13 PM
no lmao
20:13
he didnt
20:13
cant see shit
Avatar
Legoclones 04/29/2023 8:13 PM
it's beautiful
Avatar
Avatar
afterworld
does urs do the same thing
hfz 04/29/2023 8:14 PM
yeah xd
Avatar
afterworld 04/29/2023 8:14 PM
what bullshit lmao
Avatar
hfz 04/29/2023 8:14 PM
wtf
20:14
what does Ghidra have to do with the flag (edited)
Avatar
afterworld 04/29/2023 8:14 PM
idk
Avatar
hfz 04/29/2023 8:15 PM
is he referencing the vectors that we dumped?
Avatar
afterworld 04/29/2023 8:17 PM
asking
20:24
take a look at Hint #1. Note how the vectors are applied towards your game.
20:24
oh
20:24
maybe from the previous view
20:29
yeah idk this chall sucks
Avatar
hfz 04/29/2023 8:32 PM
it indeed sucks
20:32
the thing you get depends on screen resolution + mouse sensitivity
20:32
you don't get the same result
20:33
we need to guess the right sens + resolution? it's stated that csgo isn't even needed
Avatar
afterworld 04/29/2023 8:33 PM
im on 1920 1080
20:33
changed monitor res
20:33
and default sens
Avatar
sahuang 04/29/2023 8:33 PM
will admin say his res lol
Avatar
hfz 04/29/2023 8:34 PM
challenge would've been way cooler if the targets positions made up the flag
Avatar
afterworld 04/29/2023 8:34 PM
woudl sens even matter?
Avatar
hfz 04/29/2023 8:34 PM
so you could noclip and read from above
Avatar
Avatar
afterworld
woudl sens even matter?
hfz 04/29/2023 8:34 PM
yes'
Avatar
afterworld 04/29/2023 8:34 PM
its setcursorpos tho
20:34
right?
Avatar
hfz 04/29/2023 8:35 PM
yes, but the in-game behavior depends on the sensitivity
Avatar
afterworld 04/29/2023 8:35 PM
yeah ur right
20:35
Image attachment
20:35
bruh
Avatar
Avatar
hfz
(0.0, 600.0, 200.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -40.0, 50.0) (0.0, -40.0, 50.0) (0.0, 600.0, 0.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -70.0, 0.0) (0.0, 70.0, 0.0) (0.0, -40.0, 50.0) (0.0, 20.0, 30.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, 100.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -60.0, 0.0) (0.0, 60.0, 0.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, 80.0, 0.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -70.0, 0.0) (0.0, 70.0, 0.0) (0.0, -40.0, 50.0) (0.0, -20.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0)
hfz 04/29/2023 8:36 PM
send him this
Avatar
afterworld 04/29/2023 8:36 PM
i did
20:36
Take a look at Hint #1. Note how the vectors are applied towards your game.
Avatar
hfz 04/29/2023 8:36 PM
said it wasn't enough?
Avatar
Avatar
afterworld
Take a look at Hint #1. Note how the vectors are applied towards your game.
hfz 04/29/2023 8:36 PM
eh
20:36
we just take the player's position as reference, then add upon that
Avatar
afterworld 04/29/2023 8:36 PM
yeah
20:37
bro closed the ticket
20:37
he said
20:37
"Peep the hints lmao"
20:37
then closed
20:37
💀
Avatar
hfz 04/29/2023 8:38 PM
lmao what
Avatar
afterworld 04/29/2023 8:38 PM
yeah lol
Avatar
hfz 04/29/2023 8:39 PM
you know it's not a reverse challenge when tbg is on the team and the challenge remains unsolved
🤣 1
20:39
this is guessing at this point
Avatar
Avatar
afterworld
guys this is flag
afterworld 04/29/2023 8:39 PM
nah trust this is the flag
20:39
its in base64
20:39
lmao
Avatar
hfz 04/29/2023 8:39 PM
xddd
Avatar
sahuang 04/29/2023 8:40 PM
is flag in ascii?
Avatar
hfz 04/29/2023 8:43 PM
should be, they said either in flag format or just "flag"
Avatar
Avatar
hfz
we just take the player's position as reference, then add upon that
afterworld 04/29/2023 8:43 PM
u try this?
Avatar
Avatar
TheBadGod
cumulative
hfz 04/29/2023 8:44 PM
I already tried, tbg did too (edited)
Avatar
afterworld 04/29/2023 8:45 PM
bruh wtf
20:51
first character might be a V
Avatar
Avatar
TheBadGod
cumulative
sahuang 04/29/2023 8:53 PM
yeah i think we need to basically do it bullet by bullet instead of printing all
Avatar
hfz 04/29/2023 8:53 PM
it could also be in braille code
Avatar
sahuang 04/29/2023 8:53 PM
no
20:53
i mean the position overlap because you didnt erase previous dots before putting new ones
20:53
remember a chal from idekctf its similar
20:54
the draw is messy and you need to plot it char by char
20:54
what are the coordinates there?
20:54
after calculations
20:55
some chars may also be rotated or flipped btw
20:55
so if you can send me coordinates i can try it out
Avatar
afterworld 04/29/2023 8:57 PM
held for solid 7 min (edited)
Image attachment
20:57
idk anymore
Avatar
sahuang 04/29/2023 8:57 PM
send coordinate
20:57
which include the V stuff
Avatar
Avatar
hfz
(0.0, 600.0, 200.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -40.0, 50.0) (0.0, -40.0, 50.0) (0.0, 600.0, 0.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -70.0, 0.0) (0.0, 70.0, 0.0) (0.0, -40.0, 50.0) (0.0, 20.0, 30.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, 100.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 40.0, 0.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -60.0, 0.0) (0.0, 60.0, 0.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, -40.0, 0.0) (0.0, 80.0, 0.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, 50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, 40.0, -50.0) (0.0, -40.0, 50.0) (0.0, -70.0, 0.0) (0.0, 70.0, 0.0) (0.0, -40.0, 50.0) (0.0, -20.0, 0.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, -50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, -40.0, -50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0) (0.0, 0.0, 50.0)
afterworld 04/29/2023 8:58 PM
.
Avatar
hfz 04/29/2023 9:00 PM
import matplotlib.pyplot as plt vectors = [ (0.0, 600.0, 200.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, 50.0), (0.0, -40.0, 50.0), (0.0, -40.0, 50.0), (0.0, 600.0, 0.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, -40.0, 50.0), (0.0, -70.0, 0.0), (0.0, 70.0, 0.0), (0.0, -40.0, 50.0), (0.0, 20.0, 30.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, 100.0, 0.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, -60.0, 0.0), (0.0, 60.0, 0.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, 80.0, 0.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, -40.0, 50.0), (0.0, -70.0, 0.0), (0.0, 70.0, 0.0), (0.0, -40.0, 50.0), (0.0, -20.0, 0.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), ] points = [(0, 0)] for i in range(len(vectors)): points.append((points[i][0] + vectors[i][1], points[i][1] + vectors[i][2])) x_coords = [p[0] for p in points] y_coords = [p[1] for p in points] plt.plot(x_coords, y_coords, '-o') plt.show()
21:00
should be a good starter script
21:01
Image attachment
21:01
beginning looks like VA or smth
21:01
idk
Avatar
sahuang 04/29/2023 9:02 PM
ye
Avatar
Avatar
hfz
beginning looks like VA or smth
afterworld 04/29/2023 9:03 PM
yea when i was ingame i saw that too
21:04
after that it just turns into shit
21:04
its just 1 word
Avatar
hfz 04/29/2023 9:04 PM
VACBAN
Avatar
afterworld 04/29/2023 9:04 PM
OH
Avatar
hfz 04/29/2023 9:04 PM
kek
Avatar
afterworld 04/29/2023 9:04 PM
LOL
21:05
VACation (edited)
😂 1
Avatar
sahuang 04/29/2023 9:05 PM
cant brute cuz 5 tries
Avatar
afterworld 04/29/2023 9:05 PM
yeah
Avatar
sahuang 04/29/2023 9:06 PM
can you ask if it has numbers?
21:06
or just a word with all upper case
Avatar
afterworld 04/29/2023 9:06 PM
he doesnt like me anymore
Avatar
sahuang 04/29/2023 9:06 PM
can someone ask
Avatar
afterworld 04/29/2023 9:06 PM
someone else ask
Avatar
hfz 04/29/2023 9:06 PM
pretty sure there's at least 2 A's
Avatar
sahuang 04/29/2023 9:06 PM
a word with all upper case
21:06
im close
21:06
yes
21:06
im very close
Avatar
hfz 04/29/2023 9:07 PM
w8 mb I got an idea
Avatar
Avatar
sahuang
im very close
hfz 04/29/2023 9:07 PM
oh nice
Avatar
Avatar
sahuang
im very close
afterworld 04/29/2023 9:11 PM
how
21:15
might be a T
21:15
somewhere
Avatar
sahuang 04/29/2023 9:18 PM
V A C|U ?/?? (1 or 2 letters?) A N/Z (edited)
Avatar
afterworld 04/29/2023 9:18 PM
is it actually vacation
Avatar
sahuang 04/29/2023 9:18 PM
middle part is quite short
Avatar
afterworld 04/29/2023 9:18 PM
it honestly could be
21:18
o
Avatar
sahuang 04/29/2023 9:18 PM
oh wait
21:18
a sec
21:18
lemme verify
21:19
cant be vacation
Avatar
afterworld 04/29/2023 9:19 PM
ok
21:19
hm
21:19
vacban?
Avatar
hfz 04/29/2023 9:19 PM
Image attachment
21:19
idk what i'm doing
21:20
how are you getting those characters?
Avatar
afterworld 04/29/2023 9:20 PM
lmao
Avatar
sahuang 04/29/2023 9:23 PM
VACLEAN wtf is this
21:24
can someone ask if its a meaningful word?
Avatar
afterworld 04/29/2023 9:25 PM
vaclean lmao
Avatar
sahuang 04/29/2023 9:25 PM
might be ILE
Avatar
afterworld 04/29/2023 9:26 PM
o
21:26
VAC CLEAN
21:26
could mean that
21:26
used in forums
Avatar
sahuang 04/29/2023 9:26 PM
no 2 C though
21:26
hmm
Avatar
afterworld 04/29/2023 9:26 PM
yeah
21:26
in forum used wirh only 1 c
21:26
with
21:26
idk tho
Avatar
sahuang 04/29/2023 9:56 PM
Image attachment
21:56
Image attachment
21:57
Image attachment
21:57
Image attachment
21:57
Image attachment
21:57
Image attachment
21:57
Image attachment
21:57
Image attachment
21:57
2 words
21:57
any english guy
21:57
lmao
Avatar
afterworld 04/29/2023 9:57 PM
VAC is one word
21:57
rigjt
Avatar
sahuang 04/29/2023 9:57 PM
idk
Avatar
afterworld 04/29/2023 9:58 PM
has to be
21:58
cuz valve anti cheat
yesPuppet 1
Avatar
TheBadGod 04/29/2023 9:58 PM
valve anti cheat?
Avatar
sahuang 04/29/2023 9:58 PM
ah
21:58
VAC yeah
Avatar
TheBadGod 04/29/2023 9:58 PM
vac_lean?
21:59
vac_ban
Avatar
Legoclones 04/29/2023 9:59 PM
va clean?
21:59
oooh vac ban
Avatar
sahuang 04/29/2023 9:59 PM
hang on
Avatar
Legoclones 04/29/2023 9:59 PM
combine l and e
Avatar
sahuang 04/29/2023 9:59 PM
are we trying it
21:59
lemme try
Avatar
afterworld 04/29/2023 9:59 PM
try what
21:59
wait try what
Avatar
TheBadGod 04/29/2023 9:59 PM
im not, just woke up and am on my phone
Avatar
afterworld 04/29/2023 9:59 PM
w eonly have 5 attempt
Avatar
sahuang 04/29/2023 10:00 PM
solved
22:00
VACBAN lol
Avatar
Legoclones 04/29/2023 10:00 PM
LETS GO
Avatar
afterworld 04/29/2023 10:00 PM
lmfao
22:00
fucking finally
Avatar
hfz 04/29/2023 10:00 PM
LOL
Avatar
afterworld 04/29/2023 10:00 PM
shit tier chall
😂 4
Avatar
hfz 04/29/2023 10:00 PM
we guessed this a while back
22:00
lmao
Avatar
afterworld 04/29/2023 10:00 PM
@hfz called it
Avatar
Legoclones 04/29/2023 10:00 PM
all these challs are pain
Avatar
afterworld 04/29/2023 10:00 PM
yeah
22:00
just plain out dogshit
Avatar
Avatar
sahuang
used /ctf solve
Sutx BOT 04/29/2023 10:01 PM
✅ Challenge solved.
Avatar
Legoclones 04/29/2023 10:01 PM
https://www.google.com/search?q=csgo+vac+ban&rlz=1C1CHBF_enUS1006US1006&sxsrf=APwXEdefeqqBmRfiTv5R0CUIz7vaS0xzOQ%3A1682830817208&ei=4fVNZIKsDJW8kPIPvYGdkAY&ved=0ahUKEwjCoM6o6dD-AhUVHkQIHb1AB2IQ4dUDCBE&uact=5&oq=csgo+vac+ban&gs_lcp=Cgxnd3Mtd2l6LXNlcnAQAzIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQyBQgAEIAEMgUIABCABDIFCAAQgAQ6CggAEEcQ1gQQsAM6CggAEIoFELADEEM6BwgAEIoFEENKBAhBGABQjgxYrQ5ghw9oAnABeACAAVyIAcICkgEBNJgBAKABAcgBCsABAQ&sclient=gws-wiz-serp
22:01
haha vac ban yup
Avatar
afterworld 04/29/2023 10:01 PM
yeah thats the term for getting banned cuz of anti cheat in csgo
Avatar
Avatar
hfz
import matplotlib.pyplot as plt vectors = [ (0.0, 600.0, 200.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, 50.0), (0.0, -40.0, 50.0), (0.0, -40.0, 50.0), (0.0, 600.0, 0.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, -40.0, 50.0), (0.0, -70.0, 0.0), (0.0, 70.0, 0.0), (0.0, -40.0, 50.0), (0.0, 20.0, 30.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, 100.0, 0.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 40.0, 0.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, -60.0, 0.0), (0.0, 60.0, 0.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, -40.0, 0.0), (0.0, 80.0, 0.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, 50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, 40.0, -50.0), (0.0, -40.0, 50.0), (0.0, -70.0, 0.0), (0.0, 70.0, 0.0), (0.0, -40.0, 50.0), (0.0, -20.0, 0.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, -50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, -40.0, -50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), (0.0, 0.0, 50.0), ] points = [(0, 0)] for i in range(len(vectors)): points.append((points[i][0] + vectors[i][1], points[i][1] + vectors[i][2])) x_coords = [p[0] for p in points] y_coords = [p[1] for p in points] plt.plot(x_coords, y_coords, '-o') plt.show()
sahuang 04/29/2023 10:01 PM
so after this script i did print(len(x_coords)) plt.plot(x_coords[1:8], y_coords[1:8], '-o') plt.savefig(f'out/exp{0}.png') plt.close() plt.plot(x_coords[8:20], y_coords[8:20], '-o') plt.savefig(f'out/exp{1}.png') plt.plot(x_coords[20:22], y_coords[20:22], '-o') plt.savefig(f'out/exp{1}.png') plt.close() plt.plot(x_coords[22:32], y_coords[22:32], '-o') plt.savefig(f'out/exp{2}.png') plt.plot(x_coords[32:34], y_coords[32:34], '-o') plt.savefig(f'out/exp{2}.png') plt.close() plt.plot(x_coords[34:37], y_coords[34:37], '-o') plt.savefig(f'out/exp{3}.png') plt.close() plt.plot(x_coords[37:50], y_coords[37:50], '-o') plt.savefig(f'out/exp{4}.png') plt.close() plt.plot(x_coords[50:65], y_coords[50:65], '-o') plt.savefig(f'out/exp{5}.png') plt.close() plt.plot(x_coords[65:80], y_coords[65:80], '-o') plt.savefig(f'out/exp{6}.png') plt.close()
22:01
its the same as idekctf chall
Avatar
afterworld 04/29/2023 10:01 PM
damn thats pro guess
Avatar
sahuang 04/29/2023 10:01 PM
where i solved
22:01
lmao
22:02
so same trick ig
Avatar
hfz 04/29/2023 10:02 PM
dayum
Avatar
sahuang 04/29/2023 10:03 PM
this is still better
22:03
this is the idekctf one
Image attachment
Avatar
hfz 04/29/2023 10:03 PM
jerry
22:03
reminds me of connor's game of life
22:03
conway*
Avatar
afterworld 04/29/2023 10:04 PM
no fuckin way they expected someone to actually solve this inside cs, right?
22:04
i wonder if anyone did
Avatar
sahuang 04/29/2023 10:04 PM
yeah
Avatar
afterworld 04/29/2023 10:04 PM
cuz that was just random spray
Avatar
hfz 04/29/2023 10:04 PM
it depends on sens + res
Avatar
afterworld 04/29/2023 10:04 PM
tried so many diff sens and 1080
Avatar
hfz 04/29/2023 10:05 PM
no shit someone did it inside the game
Exported 445 message(s)