Skip to content
ctfpal
Every CTF
2020picoctfsolutions.compicoCTF

picoCTF 2020 Mini-Competition

6 challenges with 6 published solutions between them. Solution links go to picoctfsolutions.com, which is the only writeup source this index uses for picoCTF - one worked solution per challenge, rather than an aggregate of other people’s posts.

Every writeup on picoctfsolutions.com

Binary exploitation2

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finderShellcode assembler and libraryCyclic pattern generator and offset finderFormat string exploit builderLearn: Binary exploitation

  • Guessing Game 1

    1 writeup
    • buffer-overflow
    • rop
    • ret2libc

  • Guessing Game 2

    1 writeup
    • buffer-overflow
    • stack-canary-bypass

Web1

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Web attacks and session tokens

Reverse engineering1

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobsWebAssembly disassemblerJava .class disassemblerPython .pyc bytecode disassemblerLearn: Binary exploitation

Forensics1

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytesMagic byte and file signature tablePCAP analyzer for CTF network forensicsEXIF metadata viewerLearn: File forensics and carvingLearn: Network forensics

  • Pitter, Patter, Platters

    1 writeup
    • disk-forensics

Misc1

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoderCipher identifier and automatic decoderRegex tester with match offsets and capture groupsLearn: Recognising encodings

  • Nothing Up My Sleeve

    1 writeup
    • prng
    • custom-cipher

Other 2020 events