2016from public repositories
IRAN Cert Medium 2016
4 challenges with 7 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveCryptography2
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Solve it with:Cipher identifier and automatic decoderVigenere cipher solver with automatic key recoveryRSA decryption and attack runnerWiener’s attack on small RSA private exponentsIn-browser hash cracker with rule transformsLearn: Classical ciphers and frequency analysisLearn: RSA and the parameters that break it
70pt Rsa2
2 official solutionsAlso written up in: Execut3/CTF, Execut3/CTF
Also written up in: Execut3/CTF, Execut3/CTF
Web1
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
50pt I Like Serials
1 official solutionAlso written up in: Execut3/CTF
Reverse engineering1
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Solve it with:Strings extractor for binaries and blobsWebAssembly disassemblerJava .class disassemblerPython .pyc bytecode disassemblerLearn: Binary exploitation
Generator
2 official solutionsAlso written up in: Execut3/CTF, Execut3/CTF