---
# System prepended metadata

title: Crypto Chall

---

# Crypto Chall

- Cipher
 ```
  0. Missouri Encryption Standard (MES)
  1. Algorithm 13
  2. Algorithm MCCCXXXVII
  3. Algorithm X (Pronounced Algorithm 10)
  ```



- q's address: `0x55555558efa0`


```
0x55555558eea0  0x0000000000000000      0x0000000000000091      ................
0x55555558eeb0  0x7320657361656c50      0x2061207463656c65      Please select a
0x55555558eec0  0x72636e652077656e      0x61206e6f69747079      new encryption a
0x55555558eed0  0x6d687469726f676c      0x20646461206f7420      lgorithm to add
0x55555558eee0  0x2072756f79206f74      0x697463656c6c6f63      to your collecti
0x55555558eef0  0x202e756f002e6e6f      0x6f77206863696857      on..ou. Which wo
0x55555558ef00  0x20756f7920646c75      0x003f726566657270      uld you prefer?.
0x55555558ef10  0x756f792073656761      0x7720657261687320      ages you share w
0x55555558ef20  0x6569726620687469      0x0000000a2e73646e      ith friends.....
0x55555558ef30  0x0000000000000000      0x0000000000000071      ........q.......
0x55555558ef40  0x000055555558ef50      0x000000000000000a      P.XUUU..........
0x55555558ef50  0x4b20657461657243      0x0000000000007965      Create Key......
0x55555558ef60  0x000055555558ef70      0x000000000000000f      p.XUUU..........
0x55555558ef70  0x2074707972636e45      0x006567617373654d      Encrypt Message.
0x55555558ef80  0x000055555558ef90      0x000000000000000f      ..XUUU..........
0x55555558ef90  0x2074707972636544      0x006567617373654d      Decrypt Message.
0x55555558efa0  0x0000000000000000      0x0000000000000411      ................
0x55555558efb0  0x3463633137320a30      0x3139303732643534      0.271cc445d27091
0x55555558efc0  0x3334313966373334      0x00000000000a3963      437f9143c9......
0x55555558efd0  0x0000000000000000      0x0000000000000000      ................
0x55555558efe0  0x0000000000000000      0x0000000000000000      ................
0x55555558eff0  0x0000000000000000      0x0000000000000000      ................
0x55555558f000  0x0000000000000000      0x0000000000000000      ................
0x55555558f010  0x0000000000000000      0x0000000000000000      ................
0x55555558f020  0x0000000000000000      0x0000000000000000      ................
0x55555558f030  0x0000000000000000      0x0000000000000000      ................
0x55555558f040  0x0000000000000000      0x0000000000000000      ................
0x55555558f050  0x0000000000000000      0x0000000000000000      ................
0x55555558f060  0x0000000000000000      0x0000000000000000      ................
0x55555558f070  0x0000000000000000      0x0000000000000000      ................
0x55555558f080  0x0000000000000000      0x0000000000000000      ................
0x55555558f090  0x0000000000000000      0x0000000000000000      ................
0x55555558f0a0  0x0000000000000000      0x0000000000000000      ................
0x55555558f0b0  0x0000000000000000      0x0000000000000000      ................
0x55555558f0c0  0x0000000000000000      0x0000000000000000      ................
0x55555558f0d0  0x0000000000000000      0x0000000000000000      ................
0x55555558f0e0  0x0000000000000000      0x0000000000000000      ................
0x55555558f0f0  0x0000000000000000      0x0000000000000000      ................
0x55555558f100  0x0000000000000000      0x0000000000000000      ................
0x55555558f110  0x0000000000000000      0x0000000000000000      ................
0x55555558f120  0x0000000000000000      0x0000000000000000      ................
0x55555558f130  0x0000000000000000      0x0000000000000000      ................
0x55555558f140  0x0000000000000000      0x0000000000000000      ................
0x55555558f150  0x0000000000000000      0x0000000000000000      ................
0x55555558f160  0x0000000000000000      0x0000000000000000      ................
0x55555558f170  0x0000000000000000      0x0000000000000000      ................
0x55555558f180  0x0000000000000000      0x0000000000000000      ................
0x55555558f190  0x0000000000000000      0x0000000000000000      ................
0x55555558f1a0  0x0000000000000000      0x0000000000000000      ................
0x55555558f1b0  0x0000000000000000      0x0000000000000000      ................
0x55555558f1c0  0x0000000000000000      0x0000000000000000      ................
0x55555558f1d0  0x0000000000000000      0x0000000000000000      ................
0x55555558f1e0  0x0000000000000000      0x0000000000000000      ................
0x55555558f1f0  0x0000000000000000      0x0000000000000000      ................
0x55555558f200  0x0000000000000000      0x0000000000000000      ................
0x55555558f210  0x0000000000000000      0x0000000000000000      ................
0x55555558f220  0x0000000000000000      0x0000000000000000      ................
0x55555558f230  0x0000000000000000      0x0000000000000000      ................
0x55555558f240  0x0000000000000000      0x0000000000000000      ................
0x55555558f250  0x0000000000000000      0x0000000000000000      ................
0x55555558f260  0x0000000000000000      0x0000000000000000      ................
0x55555558f270  0x0000000000000000      0x0000000000000000      ................
0x55555558f280  0x0000000000000000      0x0000000000000000      ................
0x55555558f290  0x0000000000000000      0x0000000000000000      ................
0x55555558f2a0  0x0000000000000000      0x0000000000000000      ................
0x55555558f2b0  0x0000000000000000      0x0000000000000000      ................
0x55555558f2c0  0x0000000000000000      0x0000000000000000      ................
0x55555558f2d0  0x0000000000000000      0x0000000000000000      ................
0x55555558f2e0  0x0000000000000000      0x0000000000000000      ................
0x55555558f2f0  0x0000000000000000      0x0000000000000000      ................
0x55555558f300  0x0000000000000000      0x0000000000000000      ................
0x55555558f310  0x0000000000000000      0x0000000000000000      ................
0x55555558f320  0x0000000000000000      0x0000000000000000      ................
0x55555558f330  0x0000000000000000      0x0000000000000000      ................
0x55555558f340  0x0000000000000000      0x0000000000000000      ................
0x55555558f350  0x0000000000000000      0x0000000000000000      ................
0x55555558f360  0x0000000000000000      0x0000000000000000      ................
0x55555558f370  0x0000000000000000      0x0000000000000000      ................
0x55555558f380  0x0000000000000000      0x0000000000000000      ................
0x55555558f390  0x0000000000000000      0x0000000000000000      ................
0x55555558f3a0  0x0000000000000000      0x0000000000000000      ................
0x55555558f3b0  0x0000000000000000      0x0000000000000031      ........1.......
0x55555558f3c0  0x6972756f7373694d      0x74707972636e4520      Missouri Encrypt
0x55555558f3d0  0x6e617453206e6f69      0x454d282064726164      ion Standard (ME
0x55555558f3e0  0x0037333134002953      0x0000000000000021      S).4137.!.......
0x55555558f3f0  0x687469726f676c41      0x58584343434d206d      Algorithm MCCCXX
0x55555558f400  0x0000000049495658      0x0000000000000031      XVII....1.......
0x55555558f410  0x687469726f676c41      0x6f7250282058206d      Algorithm X (Pro
0x55555558f420  0x206465636e756f6e      0x687469726f676c41      nounced Algorith
0x55555558f430  0x000000293031206d      0x0000000000000091      m 10)...........
0x55555558f440  0x000055555558f3c0      0x0000000000000022      ..XUUU..".......
0x55555558f450  0x0000000000000022      0x0000000000000000      "...............
0x55555558f460  0x000055555558f470      0x000000000000000c      p.XUUU..........
0x55555558f470  0x687469726f676c41      0x000000003331206d      Algorithm 13....
0x55555558f480  0x000055555558f3f0      0x0000000000000014      ..XUUU..........
0x55555558f490  0x0000000000000014      0x0000000000000000      ................
0x55555558f4a0  0x000055555558fb90      0x0000000000000025      ..XUUU..%.......
0x55555558f4b0  0x0000000000000025      0x0000000000000000      %...............
0x55555558f4c0  0x0000000000000000      0x0000000000000031      ........1.......
0x55555558f4d0  0x6972756f7373694d      0x74707972636e4520      Missouri Encrypt
0x55555558f4e0  0x6e617453206e6f69      0x454d282064726164      ion Standard (ME
0x55555558f4f0  0x0000002930002953
```

```
0x55555557d000	0x0000000000000000	0x0000000000000291	................
0x55555557d010	0x0000000100030003	0x0001000000020000	................
0x55555557d020	0x0000000000000000	0x0000000000000000	................
0x55555557d030	0x0000000000000000	0x0000000000000000	................
0x55555557d040	0x0000000000000000	0x0001000000000000	................
0x55555557d050	0x0000000000000000	0x0000000000000000	................
0x55555557d060	0x0000000000000000	0x0000000000000000	................
0x55555557d070	0x0000000000000000	0x0000000000000000	................
0x55555557d080	0x0000000000000000	0x0000000000000000	................
0x55555557d090	0x000055555558faf0	0x000055555558fb10	..XUUU....XUUU..
0x55555557d0a0	0x000055555558fab0	0x0000000000000000	..XUUU..........
0x55555557d0b0	0x0000000000000000	0x000055555558f6e0	..........XUUU..
0x55555557d0c0	0x0000000000000000	0x000055555558f440	........@.XUUU..
0x55555557d0d0	0x0000000000000000	0x0000000000000000	................
0x55555557d0e0	0x0000000000000000	0x0000000000000000	................
0x55555557d0f0	0x0000000000000000	0x0000000000000000	................
0x55555557d100	0x0000000000000000	0x0000000000000000	................
0x55555557d110	0x0000000000000000	0x0000000000000000	................
0x55555557d120	0x0000000000000000	0x0000000000000000	................
0x55555557d130	0x0000000000000000	0x0000000000000000	................
0x55555557d140	0x0000000000000000	0x0000000000000000	................
0x55555557d150	0x0000000000000000	0x0000000000000000	................
0x55555557d160	0x0000000000000000	0x0000000000000000	................
0x55555557d170	0x0000000000000000	0x0000000000000000	................
0x55555557d180	0x0000000000000000	0x000055555558f8a0	..........XUUU..
0x55555557d190	0x0000000000000000	0x0000000000000000	................
0x55555557d1a0	0x0000000000000000	0x0000000000000000	................
0x55555557d1b0	0x0000000000000000	0x0000000000000000	................
0x55555557d1c0	0x0000000000000000	0x0000000000000000	................
0x55555557d1d0	0x0000000000000000	0x0000000000000000	................
0x55555557d1e0	0x0000000000000000	0x0000000000000000	................
0x55555557d1f0	0x0000000000000000	0x0000000000000000	................
0x55555557d200	0x0000000000000000	0x0000000000000000	................
0x55555557d210	0x0000000000000000	0x0000000000000000	................
0x55555557d220	0x0000000000000000	0x0000000000000000	................
0x55555557d230	0x0000000000000000	0x0000000000000000	................
0x55555557d240	0x0000000000000000	0x0000000000000000	................
0x55555557d250	0x0000000000000000	0x0000000000000000	................
0x55555557d260	0x0000000000000000	0x0000000000000000	................
0x55555557d270	0x0000000000000000	0x0000000000000000	................
0x55555557d280	0x0000000000000000	0x0000000000000000	...............
```




## 参考文献
- [C++のpwn/revで使うSTLコンテナの構造とバグパターン一覧 - CTFするぞ](https://ptr-yudai.hatenablog.com/entry/2021/11/30/235732)

- [Memory Layout of C++ Object in Different Scenarios](http://www.vishalchovatiya.com/memory-layout-of-cpp-object/)

- [Harekaze mini CTF 2020 write-up](https://qiita.com/kusano_k/items/de8947497630383ddf2a)