Camp CTF 2015
29 challenges with 81 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeBinary exploitation12
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Spam 100
6 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015, ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Also written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Bitterman 300
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Datenklo Manager 300
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Hacker Level 200
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Phobos 300
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Ropcalc 225
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Secret File 150
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Server
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Shell 300
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Uncategorised8
The upstream scoreboard did not say, so neither do we.
Bitterman
3 official solutionsAlso written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
L1sten To The Rad1o 375
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Ropcalc
3 official solutionsAlso written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
Shell
3 official solutionsAlso written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
Broken Rsa
2 official solutionsAlso written up in: sonickun/ctf-crypto-writeups, sonickun/ctf-crypto-writeups
Bitterman Pwn 400
1 official solutionAlso written up in: ctfhacker/ctf-writeups
Exploit2
1 official solutionAlso written up in: stormworm29/CTF-WriteUps
Also written up in: ctfhacker/ctf-writeups
Reverse engineering5
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Flagbox 200
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Flagbox Onsite 150
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Keycheck 200
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
O1dar 500
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Web3
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Trolol 150
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Voodoo 250
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Websocket 75
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
APT incident response 400
3 official solutionsAlso written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015