2024from public repositories
Colosseum 14.0 2024
4 challenges with 4 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveOSINT2
Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.
Social Bird
1 official solutionAlso written up in: Bugaddr/infosec_writeups
Training
1 official solutionAlso written up in: Bugaddr/infosec_writeups
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Solve it with:File type identifier by magic bytesMagic byte and file signature tablePCAP analyzer for CTF network forensicsEXIF metadata viewerLearn: File forensics and carvingLearn: Network forensics
Get The Light
1 official solutionAlso written up in: Bugaddr/infosec_writeups
Web1
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
Also written up in: Bugaddr/infosec_writeups