2014weight 75.00Plaid Parliament of Pwning

PlaidCTF 2014

44 challenges with 223 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Uncategorised13

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

Check
3 official solutions
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
Jackshit
3 official solutions
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
Mike Pizza
3 official solutions
Also written up in: hackerclub/writeups, hackerclub/writeups, hackerclub/writeups
Moscow
3 official solutions
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
Pipecork
3 official solutions
Also written up in: hackerclub/writeups, hackerclub/writeups, hackerclub/writeups
Sass
3 official solutions
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
Messy
2 official solutions
Also written up in: ctfs/write-ups-2014, ctfs/write-ups
Arthurdent
1 official solution
Also written up in: hackerclub/writeups
Crack
1 official solution
Also written up in: ispoleet/ctf-writeups
Django Exploit
1 official solution
Also written up in: hackerclub/writeups
Em Trace
1 official solution
Also written up in: ispoleet/ctf-writeups
Qsort
1 official solution
Also written up in: tarafans/CTF-writeup
Shellcode
1 official solution
Also written up in: JusticeEX/ctf-writeups

Misc10

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Heartbleed
10 pts5 writeups
Also written up in: ctfs/write-ups-2014, ctfs/write-ups-2014, hackerclub/writeups, avantasia/write-ups, avantasia/write-ups, ctfs/write-ups, ctfs/write-ups, akaminsky.net
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
ezhp
200 pts3 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups, qwaz/solved-hacking-problem, shift-crops/CTFWriteups, shift-crops/CTFWriteups, toomanybananas/ctf_solutions, zj3t/ctf
- pwnables
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
kappa
275 pts1 writeup
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups, smallkirby/pwn-writeups, ndaprela/CTF, wmitc/ctf, toomanybananas/ctf_solutions
- pwnables
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
__nightmares__
375 pts4 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- pwnables
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
harry_potter
300 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups, JusticeEX/ctf-writeups
- pwnables
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
tenement
100 pts3 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- pwnables
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Freya
250 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
multiplication is hard
10 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
rendezvous
250 pts1 writeup
Also written up in: ctfs/write-ups-2014, hackerclub/writeups, avantasia/write-ups, ctfs/write-ups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Sanity check
1 pts2 writeups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer

Web7

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

mtpox
150 pts4 writeups
Also written up in: ctfs/write-ups-2014, hackerclub/writeups, avantasia/write-ups, ctfs/write-ups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
PolygonShifter
100 pts3 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups, balidani.blogspot.hu, balidani.blogspot.pt
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
halphow2js
200 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups, balidani.blogspot.hu, balidani.blogspot.pt
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
reeekeeeeee
200 pts3 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
WhatsCat
300 pts3 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
kpop
200 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
bronies
800 pts1 writeup
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA

Reverse engineering5

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

g++
200 pts5 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
paris
300 pts3 writeups
Also written up in: ctfs/write-ups-2014, ispoleet/ctf-writeups, avantasia/write-ups, ctfs/write-ups
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
gcc
300 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
hudak
250 pts1 writeup
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
tiffany
300 pts1 writeup
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200

Forensics5

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytes Magic byte and file signature table PCAP analyzer for CTF network forensics EXIF metadata viewer Learn: File forensics and carving Learn: Network forensics

doge_stege
100 pts5 writeups
Also written up in: ctfs/write-ups-2014, hackerclub/writeups, avantasia/write-ups, ctfs/write-ups
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
curlcore
250 pts5 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
zfs
400 pts3 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
bbos
350 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
rsa
450 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r

Cryptography4

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

parlor
250 pts3 writeups
Also written up in: ctfs/write-ups-2014, sonickun/ctf-crypto-writeups, avantasia/write-ups, ctfs/write-ups, sonickun/ctf-crypto-writeups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
twenty
20 pts4 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
wheeeee
375 pts2 writeups
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
graphs
200 pts1 writeup
Also written up in: ctfs/write-ups-2014, avantasia/write-ups, ctfs/write-ups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC

Uncategorised13

Check

Jackshit

Mike Pizza

Moscow

Pipecork

Sass

Messy

Arthurdent

Crack

Django Exploit

Em Trace

Qsort

Shellcode

Misc10

Heartbleed

ezhp

kappa

__nightmares__

harry_potter

tenement

Freya

multiplication is hard

rendezvous

Sanity check

Web7

mtpox

PolygonShifter

halphow2js

reeekeeeeee

WhatsCat

kpop

bronies

Reverse engineering5

g++

paris

gcc

hudak

tiffany

Forensics5

doge_stege

curlcore

zfs

bbos

rsa

Cryptography4

parlor

twenty

wheeeee

graphs

Other 2014 events

nightmares