EBCTF 2013
22 challenges with 45 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeBinary exploitation8
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: toomanybananas/ctf_solutions
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
And Web
2 official solutionsAlso written up in: balidani.blogspot.hu, balidani.blogspot.pt
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Forensics6
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Cryptography5
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Web400 (crypto aes cbc hmac)
1 official solutionAlso written up in: codezen.fr
Web3
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Same technique in picoCTF: Live Art, secure-email-service, No FA
Same technique in picoCTF: Live Art, secure-email-service, No FA
Same technique in picoCTF: Live Art, secure-email-service, No FA