2022from public repositories
CCSC 2022
4 challenges with 4 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveWeb2
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
Planet TC 39 #1
1 official solutionAlso written up in: SababaSec/ctf-writeups
Planet TC 39 #2
1 official solutionAlso written up in: SababaSec/ctf-writeups
Misc1
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Solve it with:Brainfuck and esolang decoderCipher identifier and automatic decoderRegex tester with match offsets and capture groupsLearn: Recognising encodings
CUBIK RICK
1 official solutionAlso written up in: SababaSec/ctf-writeups
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Solve it with:File type identifier by magic bytesMagic byte and file signature tablePCAP analyzer for CTF network forensicsEXIF metadata viewerLearn: File forensics and carvingLearn: Network forensics
The Citadel of Ricks
1 official solutionAlso written up in: SababaSec/ctf-writeups