Break the Syntax CTF 2022
25 challenges with 47 published solutions between them. No writeups were ever filed against this event's listing, so its solutions were found in public repositories instead. Each link is pinned to the commit it was read from.
The event listingCryptography10
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Code Book
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Also written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Identity
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Identity 2
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Identity 3
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Shorty
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Substitute
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Xoxoxo
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Its Free Real Spa
1 official solutionAlso written up in: PWrWhiteHats/BtS-2022-Writeups
Solution2
1 official solutionAlso written up in: PWrWhiteHats/BtS-2022-Writeups
Binary exploitation4
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Access
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Babyheap
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Rock Paper Scissors
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Shellcode
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Web4
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
entityRpg
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Scammerland
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Scammerland2
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Totallylegitshop
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Misc3
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Secret Channel
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Secure Disclosure
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Datapack
1 official solutionAlso written up in: PWrWhiteHats/BtS-2022-Writeups
Reverse engineering2
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Interpreter
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Oxidation
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Uncategorised1
The upstream scoreboard did not say, so neither do we.
Babyste
2 official solutionsAlso written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Also written up in: PWrWhiteHats/BtS-2022-Writeups, PWrWhiteHats/BtS-2022-Writeups