osu!gaming CTF 2024
32 challenges with 61 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeUncategorised17
The upstream scoreboard did not say, so neither do we.
Mikufanpage
3 official solutionsAlso written up in: satoki/ctf_writeups, VUIBERTAlexis/CTF-Writeups, yu1hpa/ctf-writeup
Infiltrating the OSU! (I)
2 official solutionsAlso written up in: satoki/ctf_writeups, VUIBERTAlexis/CTF-Writeups
Pp Ranking
2 official solutionsAlso written up in: SuperStormer/writeups, SuperStormer/writeups
Profile Page
2 official solutionsAlso written up in: satoki/ctf_writeups, yu1hpa/ctf-writeup
Script (6)
2 official solutionsAlso written up in: vanluongkma/CTF-Writeups, Caycon/CTF-Writeups
Secret Map
2 official solutionsAlso written up in: vanluongkma/CTF-Writeups, Caycon/CTF-Writeups
Abnormal Life
1 official solutionAlso written up in: sahuang/my-ctf-challenges
Chatgpt4.Py
1 official solutionAlso written up in: satoki/ctf_writeups
Checker
1 official solutionAlso written up in: sahuang/my-ctf-challenges
Ecs!Catch
1 official solutionAlso written up in: NJITICC/Write-Ups
Infiltrating the OSU! (II)
1 official solutionAlso written up in: satoki/ctf_writeups
Osu Crossword
1 official solutionAlso written up in: sahuang/my-ctf-challenges
Out Of Click
1 official solutionAlso written up in: satoki/ctf_writeups
SAT before osu
1 official solutionAlso written up in: Lobsterge/CTF-Writeups
Server
1 official solutionAlso written up in: sahuang/my-ctf-challenges
When You Dont See It
1 official solutionAlso written up in: satoki/ctf_writeups
Wysi Baby
1 official solutionAlso written up in: sahuang/my-ctf-challenges
Cryptography5
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: archv1le/CTF-Write-Ups, VUIBERTAlexis/CTF-Writeups, gOo0s3/CTF-writeups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: satoki/ctf_writeups, archv1le/CTF-Write-Ups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- lcg
- crypto
- lattice
Same technique in picoCTF: MSS_ADVANCE Revenge, Not TRUe, It's Not My Fault 2
New Script
1 official solutionAlso written up in: gOo0s3/CTF-writeups
Script
1 official solutionAlso written up in: gOo0s3/CTF-writeups
Binary exploitation3
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Betterthanu
6 official solutionsAlso written up in: Lobsterge/CTF-Writeups, exorcize/ctf-writeups, VUIBERTAlexis/CTF-Writeups, miraicantsleep/ctf-writeups, Lobsterge/CTF-Writeups, exorcize/ctf-writeups
Miss Analyzer
4 official solutionsAlso written up in: Lobsterge/CTF-Writeups, strellic/my-ctf-challenges, miraicantsleep/ctf-writeups, Lobsterge/CTF-Writeups
Osujail
2 official solutionsAlso written up in: SuperStormer/writeups, exorcize/ctf-writeups
Forensics2
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Also written up in: satoki/ctf_writeups
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
OSINT2
Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.
Also written up in: satoki/ctf_writeups, sahuang/my-ctf-challenges
- osint
Same technique in picoCTF: CVE-XXXX-XXXX
- osint
Same technique in picoCTF: CVE-XXXX-XXXX
Web2
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Adminbot Test
2 official solutionsAlso written up in: strellic/my-ctf-challenges, strellic/my-ctf-challenges
Also written up in: strellic/my-ctf-challenges, strellic/my-ctf-challenges
Reverse engineering1
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Also written up in: sahuang/my-ctf-challenges
- wasm
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200