2013weight 80.00

Codegate CTF Preliminary 2013

18 challenges with 37 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Web5

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Web attacks and session tokens

Web 500
500 pts5 writeups
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
Web 100
100 pts4 writeups
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
Web 200
200 pts4 writeups
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
Web 300
300 pts1 writeup
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
Web 400
400 pts1 writeup
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3

Binary exploitation5

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Binary 100
100 pts2 writeups
Same technique in picoCTF: Guessing Game 1, x-sixty-what, format string 3
Vuln 400
400 pts2 writeups
Same technique in picoCTF: Guessing Game 1, x-sixty-what, format string 3
Binary 300
300 pts1 writeup
Same technique in picoCTF: Guessing Game 1, x-sixty-what, format string 3
Vuln 200
200 pts1 writeup
Same technique in picoCTF: Guessing Game 1, x-sixty-what, format string 3
Vuln 300
300 pts1 writeup
Same technique in picoCTF: Guessing Game 1, x-sixty-what, format string 3

Forensics5

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytes Magic byte and file signature table PCAP analyzer for CTF network forensics EXIF metadata viewer Learn: File forensics and carving Learn: Network forensics

Forensics 100
100 pts3 writeups
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
Forensics 200
200 pts2 writeups
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
Forensics 300
300 pts2 writeups
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
Forensics 400
400 pts1 writeup
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
Forensics 500
500 pts1 writeup
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions

Misc3

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Misc 100
100 pts2 writeups
Same technique in picoCTF: Permissions, Specialer, Codebook
Misc 200
200 pts2 writeups
Same technique in picoCTF: Permissions, Specialer, Codebook
Misc 300
300 pts2 writeups
Same technique in picoCTF: Permissions, Specialer, Codebook

Web5

Web 500

Web 100

Web 200

Web 300

Web 400

Binary exploitation5

Binary 100

Vuln 400

Binary 300

Vuln 200

Vuln 300

Forensics5

Forensics 100

Forensics 200

Forensics 300

Forensics 400

Forensics 500

Misc3

Misc 100

Misc 200

Misc 300

Other 2013 events