2022weight 0.00GCC-Team

Global CyberPeace Challenge 3.0 CTF-IT

4 challenges with 6 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Web2

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

CTF Password Spraying HTTP
200 pts1 writeup
- pentest
Same technique in picoCTF: Live Art, secure-email-service, No FA
CTF Password Spraying SSH
200 pts1 writeup
- pentest
Same technique in picoCTF: Live Art, secure-email-service, No FA

Reverse engineering2

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

CrackMe Native
200 pts1 writeup
Also written up in: acdwas/ctf, acdwas/ctf
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
License Key Circumvention Level 4
300 pts1 writeup
- rev
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200

Web2

CTF Password Spraying HTTP

CTF Password Spraying SSH

Reverse engineering2

CrackMe Native

License Key Circumvention Level 4

Other 2022 events