ALLES! CTF 2020
52 challenges with 90 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeReverse engineering15
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
- game
- rev
- android
Mario
2 official solutionsAlso written up in: r00tus3r/CTF-Scripts, r00tus3r/CTF-Scripts
AssetManager
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
DelayedRemovalArray
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
DragAndDrop
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
- game
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
HorizontalGroup
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
Notes
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
PauseableThread
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
PooledLinkedList
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
SnapshotArray
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
SpriteAnimation
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
TemporalAction
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
VerticalGroup
1 official solutionAlso written up in: r00tus3r/CTF-Scripts
Uncategorised13
The upstream scoreboard did not say, so neither do we.
Actual ASLR 1 2
1 official solutionAlso written up in: devel0pment.de
Bootstrap.Min
1 official solutionAlso written up in: jakecraige/ctf
Build Graph
1 official solutionAlso written up in: mephi42/ctf
Canvasjs.Min
1 official solutionAlso written up in: jakecraige/ctf
Extract Rooms
1 official solutionAlso written up in: mephi42/ctf
Generate Seqs
1 official solutionAlso written up in: mephi42/ctf
Init Db
1 official solutionAlso written up in: jakecraige/ctf
Also written up in: TeamOm3ga/writeups
Jquery 3.5.1.Slim.Min
1 official solutionAlso written up in: jakecraige/ctf
NSA leak
1 official solutionAlso written up in: dogelition/ctf-writeups
Olddos
1 official solutionAlso written up in: TeamOm3ga/writeups
Popper.Min
1 official solutionAlso written up in: jakecraige/ctf
Restart
1 official solutionAlso written up in: mephi42/ctf
Misc12
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Also written up in: ROFLailXGOD/CTFs
- pyjail
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: ROFLailXGOD/CTFs
- python
- sandbox
Same technique in picoCTF: PW Crack 2, PW Crack 1, PW Crack 3
Also written up in: TeamOm3ga/writeups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- bash
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: TeamOm3ga/writeups
- canbus
- hardware
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- canbus
- hardware
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- canbus
- hardware
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
- boomer
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- bash
- canbus
- hardware
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Cryptography4
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: CTF-STeam/ctf-writeups
- hash-collision
- crypto
Same technique in picoCTF: Guess My Cheese (Part 2), hashcrack, It's Not My Fault 2
Aaslr
1 official solutionAlso written up in: TeamOm3ga/writeups
- crc32
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Web3
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: Super-Guesser/ctf
- web
- named-pipes
- prototype-pollution
Same technique in picoCTF: Live Art, secure-email-service, No FA
Also written up in: Super-Guesser/ctf, jakecraige/ctf
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
- web
- push
Same technique in picoCTF: Live Art, secure-email-service, No FA
Binary exploitation2
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: datajerk/ctf-write-ups, smallkirby/pwn-writeups, smallkirby/pwn-writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: smallkirby/pwn-writeups
- binary-exploitation
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Forensics2
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Also written up in: turnipsoup/ctfwriteups, turnipsoup/ctfwriteups, TeamOm3ga/writeups
- hardware
- forensic
- re
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Also written up in: RickdeJager/CTF, blog.bricked.tech
- game
- networking
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Steganography1
Find the payload hidden inside a carrier that looks ordinary. Bit planes, appended data, metadata, and audio spectrograms.
Also written up in: dogelition/ctf-writeups
- steganography
Same technique in picoCTF: StegoRSA, Glory of the Garden, Investigative Reversing 0