Haruulzangi Round 2021
19 challenges with 24 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveWeb11
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Admin
1 official solutionAlso written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
Also written up in: haruulzangi/2021
God Wisper
1 official solutionAlso written up in: haruulzangi/2021
Uncategorised7
The upstream scoreboard did not say, so neither do we.
Also written up in: haruulzangi/2021, haruulzangi/2021, haruulzangi/2021, haruulzangi/2021
Mathgod
2 official solutionsAlso written up in: haruulzangi/2021, haruulzangi/2021
Securebackup
2 official solutionsAlso written up in: haruulzangi/2021, haruulzangi/2021
Handshake
1 official solutionAlso written up in: haruulzangi/2021
PasswordViewModel
1 official solutionAlso written up in: haruulzangi/2021
Screenshot
1 official solutionAlso written up in: haruulzangi/2021
Weakryption
1 official solutionAlso written up in: haruulzangi/2021
Binary exploitation1
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: haruulzangi/2021