KalmarCTF 2023
19 challenges with 36 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeUncategorised8
The upstream scoreboard did not say, so neither do we.
Also written up in: shalaamum/ctf-writeups, shalaamum/ctf-writeups
Cyclechaser
2 official solutionsAlso written up in: rivit98/ctf-writeups, shalaamum/ctf-writeups
Easyonetimepad
2 official solutionsAlso written up in: rivit98/ctf-writeups, shalaamum/ctf-writeups
Cards
1 official solutionAlso written up in: rivit98/ctf-writeups
CycleChaser Revenge
1 official solutionAlso written up in: shalaamum/ctf-writeups
DreamHash
1 official solutionAlso written up in: shalaamum/ctf-writeups
Hyper K
1 official solutionAlso written up in: mito753/Kernel-Exploit-Dojo
Invoiced
1 official solutionAlso written up in: av4nth1ka/web-ctf-notes
Misc4
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Also written up in: Green-Avocado/CTF, Green-Avocado/CTF
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Create
1 official solutionAlso written up in: kalmarunionenctf/kalmarctf
Ez ⛳
1 writeupSame technique in picoCTF: PW Crack 2, Permissions, Specialer
Sanity Check
1 writeupSame technique in picoCTF: PW Crack 2, Permissions, Specialer
Binary exploitation3
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: WilliamParks/ctf_writeups
- pwn
- javascript
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Swedish Memcpy
2 official solutionsAlso written up in: Green-Avocado/CTF, Green-Avocado/CTF
Kernel
1 official solutionAlso written up in: Green-Avocado/CTF
Cryptography2
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Babyonetimepad
3 official solutionsAlso written up in: rivit98/ctf-writeups, KernelKrise/CTF, shalaamum/ctf-writeups
Output
1 official solutionAlso written up in: KernelKrise/CTF
Web1
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: crimist/ctf, omerAF/CTFs
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Forensics1
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Also written up in: daffainfo/ctf-writeup, siunam321/CTF-Writeups
- udp
- scapy
- pcap
- forensics
Same technique in picoCTF: FindAndOpen, Ph4nt0m 1ntrud3r, WebNet0