BlueHens CTF 2023
46 challenges with 67 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeCryptography15
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: dovodedomo/CTF-Writeups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: n1mdacybersec/CTF-Write-Up-Collection
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: tvdat20004/CTF_write-up
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- baby
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
- crypto
- baby
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
Uncategorised13
The upstream scoreboard did not say, so neither do we.
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Also written up in: tvdat20004/CTF_write-up
Appetizer
1 official solutionAlso written up in: tvdat20004/CTF_write-up
Chall3
1 official solutionAlso written up in: tvdat20004/CTF_write-up
Defective Server
1 official solutionAlso written up in: tvdat20004/CTF_write-up
Modular Authentication
1 official solutionAlso written up in: tvdat20004/CTF_write-up
Solve3
1 official solutionAlso written up in: tvdat20004/CTF_write-up
Misc7
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Also written up in: daffainfo/ctf-writeup, n1mdacybersec/CTF-Write-Up-Collection
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: wepfen/writeups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: n1mdacybersec/CTF-Write-Up-Collection, dovodedomo/CTF-Writeups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- minecraft
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- minecraft
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Web6
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: n1mdacybersec/CTF-Write-Up-Collection, n1mdacybersec/CTF-Write-Up-Collection
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Just Cat The Flask 1
2 official solutionsAlso written up in: daffainfo/ctf-writeup, n1mdacybersec/CTF-Write-Up-Collection
Super Admin
2 official solutionsAlso written up in: daffainfo/ctf-writeup, n1mdacybersec/CTF-Write-Up-Collection
Also written up in: 0x-Matthias/CTF-Writeups
- web
Same technique in picoCTF: Irish-Name-Repo 3, Startup Company, More SQLi
Scripts
1 official solutionAlso written up in: 0x-Matthias/CTF-Writeups
SQL 4 Dummies
1 official solutionAlso written up in: n1mdacybersec/CTF-Write-Up-Collection
Reverse engineering4
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
OSINT1
Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.
Also written up in: n1mdacybersec/CTF-Write-Up-Collection, dovodedomo/CTF-Writeups
- osint
Same technique in picoCTF: CVE-XXXX-XXXX