2019weight 13.0011#Itsatu

CTF19 - ALL.MN

4 challenges with 6 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Web3

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

Robots
70 pts2 writeups
Also written up in: imurasheen.hatenablog.com
- robots
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
SQL
100 pts1 writeup
- sql
- xss
- injection
- web
- sqli
Same technique in picoCTF: Live Art, secure-email-service, Irish-Name-Repo 3
Windows XP
150 pts1 writeup
- web
- headers
- windows
Same technique in picoCTF: Live Art, secure-email-service, No FA

Misc1

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Archive
200 pts1 writeup
- misc
- archive
Same technique in picoCTF: PW Crack 2, Permissions, Specialer

Web3

Robots

SQL

Windows XP

Misc1

Archive

Other 2019 events