2019from public repositories
ogeek AndroidPHP 2019
4 challenges with 12 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveWeb2
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
Bootstrap.Min
1 official solutionAlso written up in: SniperOJ/Jeopardy-Dockerfiles
Jquery.Min
1 official solutionAlso written up in: SniperOJ/Jeopardy-Dockerfiles
Binary exploitation1
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Misc1
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Solve it with:Brainfuck and esolang decoderCipher identifier and automatic decoderRegex tester with match offsets and capture groupsLearn: Recognising encodings
Also written up in: Ex-Origin/ctf-writeups, fei9747/ctf-writeups