HITCON CTF 2020
50 challenges with 181 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeUncategorised30
The upstream scoreboard did not say, so neither do we.
Spark
8 official solutionsAlso written up in: mito753/Kernel-Exploit-Dojo, perfectblue/ctf-writeups, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo
Pwnit
4 official solutionsAlso written up in: mephi42/ctf, mephi42/ctf, mephi42/ctf, mephi42/ctf
Also written up in: how2hack/CTF-writeups, scwuaptx/CTF, scwuaptx/CTF
Exp Vulndb Fastbin Kruz
3 official solutionsAlso written up in: LJP-TW/CTF, LJP-TW/CTF, LJP-TW/CTF
Exp Vulndb Orw
3 official solutionsAlso written up in: LJP-TW/CTF, LJP-TW/CTF, LJP-TW/CTF
MichaelStorage
3 official solutionsAlso written up in: scwuaptx/CTF, scwuaptx/CTF, leesh3288/CTF
Revenge
3 official solutionsAlso written up in: moratorium08/ctf_writeups, perfectblue/ctf-writeups, rollsafe/ctf-writeups
Also written up in: orangetw/My-CTF-Web-Challenges, Hope0351/CTF-collection
Disasm
2 official solutionsAlso written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups
Exp Vulndb Gg
2 official solutionsAlso written up in: LJP-TW/CTF, LJP-TW/CTF
Exp Vulndb Patched2
2 official solutionsAlso written up in: LJP-TW/CTF, LJP-TW/CTF
Also written up in: yuawn/CTF, ssspeedgit00/CTF
Also written up in: david942j/ctf-writeups, tools_col/ctf-writeups
Gen Prepare Sc
2 official solutionsAlso written up in: david942j/ctf-writeups, tools_col/ctf-writeups
Also written up in: LJP-TW/CTF
Angrit
1 official solutionAlso written up in: mephi42/ctf
Baby Tcache
1 official solutionAlso written up in: vigneshsrao.github.io
Debugger
1 official solutionAlso written up in: cybernatedwizards/CybernatedWizardsCTF
Also written up in: 7feilee/ctf_writeup
Also written up in: LJP-TW/CTF
Also written up in: kuruwa2/ctf-writeups
Gouburin
1 official solutionAlso written up in: LJP-TW/CTF
Also written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020
Icmp Meanie
1 official solutionAlso written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020
Lucifer
1 official solutionAlso written up in: scwuaptx/CTF
Also written up in: kuruwa2/ctf-writeups
Shellcode
1 official solutionAlso written up in: Pusty/writeups
Unpack
1 official solutionAlso written up in: turnipsoup/ctfwriteups
Also written up in: LJP-TW/CTF
Also written up in: smallkirby/pwn-writeups
Misc8
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Also written up in: qxxxb/ctf, FrenchRoomba/ctf-writeup-HITCON-CTF-2020, qxxxb/ctf
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020, aplhk/ctf-writeups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Amongthem
2 official solutionsAlso written up in: HardworkingSnowman/CTF, zeze-zeze/CTF
CryptoJS.min
2 official solutionsAlso written up in: HardworkingSnowman/CTF, zeze-zeze/CTF
Source
2 official solutionsAlso written up in: HardworkingSnowman/CTF, zeze-zeze/CTF
tpEncrypt
2 official solutionsAlso written up in: HardworkingSnowman/CTF, zeze-zeze/CTF
Widgets.Min
2 official solutionsAlso written up in: HardworkingSnowman/CTF, zeze-zeze/CTF
Reverse engineering5
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Also written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020, moratorium08/ctf_writeups, okas832/CTF-writeup, alexcormier/ctf-writeups, cybernatedwizards/CybernatedWizardsCTF, perfectblue/ctf-writeups, david942j/ctf-writeups, LJP-TW/CTF, www.pwndiary.com, pwndiary.com
- misc
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: p4-team/ctf, david942j/ctf-writeups, tools_col/ctf-writeups, perfectblue/ctf-writeups, david942j/ctf-writeups, greeenbeans/CTF-writeups, Pusty/writeups, rollsafe/ctf-writeups
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: p4-team/ctf, p4-team/ctf, Pusty/writeups, Pusty/writeups, Pusty/writeups
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: p4-team/ctf, okas832/CTF-writeup, david942j/ctf-writeups, okas832/CTF-writeup, tools_col/ctf-writeups
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Binary exploitation4
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020, Arinerron/writeups, david942j/ctf-writeups, david942j/ctf-writeups, leesh3288/CTF, leesh3288/CTF, Arinerron/writeups, tools_col/ctf-writeups
- misc
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups, perfectblue/ctf-writeups, jt00000/ctf.writeup, rollsafe/ctf-writeups, shift-crops/CTFWriteups, jjy-security.tistory.com
- c
- rust
- pwn
- c++
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo, mito753/Kernel-Exploit-Dojo
- misc
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Cryptography2
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups, perfectblue/ctf-writeups, perfectblue/ctf-writeups, perfectblue/ctf-writeups, perfectblue/ctf-writeups, rollsafe/ctf-writeups, rollsafe/ctf-writeups
- padding-oracle
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups, perfectblue/ctf-writeups, perfectblue/ctf-writeups, rollsafe/ctf-writeups, rollsafe/ctf-writeups
- crypto
- xorshift128+
Same technique in picoCTF: Custom encryption, XtraORdinary, It's Not My Fault 2
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Also written up in: FrenchRoomba/ctf-writeup-HITCON-CTF-2020, turnipsoup/ctfwriteups, hyperreality/ctf-writeups, ret2school.github.io
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r