0CTF/TCTF 2018 Quals
27 challenges with 80 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeUncategorised9
The upstream scoreboard did not say, so neither do we.
H4x0rs.Club
2 official solutionsAlso written up in: l4wio/CTF-challenges-by-me, lbherrera/writeups
Hidden Message
2 official solutionsAlso written up in: david942j/ctf-writeups, tools_col/ctf-writeups
MathGame
2 official solutionsAlso written up in: david942j/ctf-writeups, tools_col/ctf-writeups
pwn1000 Mighty Dragon
2 official solutionsAlso written up in: david942j.blogspot.tw, david942j.blogspot.com
Also written up in: l4wio/CTF-challenges-by-me
Baby Heap 2018
1 official solutionAlso written up in: shift-crops/CTFWriteups
Baby Stack ret2dlresolve
1 official solutionAlso written up in: www.da.vidbuchanan.co.uk
House of Cards
1 official solutionAlso written up in: l4wio/CTF-challenges-by-me
TCTF 2018 Quals (Baby Heap 2018 & Heap Storm II)
1 official solutionAlso written up in: shift-crops.hatenablog.com
Binary exploitation7
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: sajjadium/ctf-writeups, sajjadium/CTFium, sajjadium/ctf-writeups, sajjadium/PersianCatsCTF, sajjadium/ctf-writeups, 0ops/ctfs, sajjadium/CTFium, sajjadium/ctf-writeups, amritabi0s.wordpress.com
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: david942j/ctf-writeups, tools_col/ctf-writeups, sajjadium/ctf-writeups, 0ops/ctfs, sajjadium/CTFium, sajjadium/ctf-writeups, sajjadium/PersianCatsCTF
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: oalieno/CTF, OAlienO/CTF, szk3y/writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: david942j/ctf-writeups, tools_col/ctf-writeups
- pwnable
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: shift-crops/CTFWriteups
- heap
- pwnable
Same technique in picoCTF: vr-school, sice_cream, zero_to_hero
Also written up in: sajjadium/ctf-archives, sajjadium/ctf-archives
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Cryptography5
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
zer0C5 (Crypto 785)
1 official solutionAlso written up in: mslc.ctf.su
zer0SPN (Crypto 550)
1 official solutionAlso written up in: mslc.ctf.su
zer0TC (Crypto 916)
1 official solutionAlso written up in: mslc.ctf.su
Web4
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: l4wio/CTF-challenges-by-me, l4wio/CTF-challenges-by-me
- javascript
- web
- regex
Same technique in picoCTF: Java Code Analysis!?!, Live Art, secure-email-service
Also written up in: l4wio/CTF-challenges-by-me, l4wio/CTF-challenges-by-me
- web
- xss
Same technique in picoCTF: Live Art, secure-email-service, msfroggenerator2
- web
- xss
Same technique in picoCTF: Live Art, secure-email-service, msfroggenerator2
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Reverse engineering2
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Also written up in: oalieno/CTF, GHAFRI/Writeups, OAlienO/CTF, oalieno/CTF, OAlienO/CTF
Also written up in: GHAFRI/Writeups, blog.terrynini.tw
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200