RITSEC CTF 2019
63 challenges with 226 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeUncategorised14
The upstream scoreboard did not say, so neither do we.
RageDelete
2 official solutionsAlso written up in: Cryptanalyse/writeups, Cryptanalyse/writeups
REHOST
2 official solutionsAlso written up in: pwncollege/ctf-archive, pwncollege/ctf-archive
43905
1 official solutionAlso written up in: uppusaikiran/CTFWriteups
999 Bottles SOLVED
1 official solutionAlso written up in: wr47h/CTF-Writeups
ACORN SOLVED
1 official solutionAlso written up in: wr47h/CTF-Writeups
Alphabetical Challenge SOLVED
1 official solutionAlso written up in: wr47h/CTF-Writeups
Buckets Of Fun Original
1 official solutionAlso written up in: francescolonardo/CTF-Writeups-NLP-Analysis
Also written up in: wr47h/CTF-Writeups
Jit Calc 2
1 official solutionAlso written up in: tin-z/mY_Writ3_Up5
Misdirection Original
1 official solutionAlso written up in: francescolonardo/CTF-Writeups-NLP-Analysis
Onion Encoding SOLVED
1 official solutionAlso written up in: wr47h/CTF-Writeups
Our First Api Original
1 official solutionAlso written up in: francescolonardo/CTF-Writeups-NLP-Analysis
Potat0 Original
1 official solutionAlso written up in: francescolonardo/CTF-Writeups-NLP-Analysis
pre legend SOLVED
1 official solutionAlso written up in: wr47h/CTF-Writeups
Cryptography11
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: b0th/CTF, ioncodes/excusemewtf
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: akashsuper2000/ctf-archive, b01lers/b01lers-library, ioncodes/excusemewtf, ioncodes/excusemewtf, ioncodes/excusemewtf, lo0l.com
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: ioncodes/excusemewtf, meowmeowxw.gitlab.io
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: ioncodes/excusemewtf
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
292 Random
1 official solutionAlso written up in: b01lers/b01lers-library
500 Evil Accountant
1 official solutionAlso written up in: b01lers/b01lers-library
Description
1 official solutionAlso written up in: b01lers/b01lers-library
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Initiation
1 official solutionAlso written up in: ioncodes/excusemewtf
Mceliece
1 official solutionAlso written up in: b01lers/b01lers-library
Web9
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: m3ssap0/CTF-Writeups, alex-bellon/ctf-writeups, Hope0351/CTF-collection, juanjo2297/CTF-writeups, penetration-test-learn/docs/CTF-Writeups, uppusaikiran/CTFWriteups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Also written up in: m3ssap0/CTF-Writeups, Hope0351/CTF-collection, juanjo2297/CTF-writeups, penetration-test-learn/docs/CTF-Writeups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Also written up in: m3ssap0/CTF-Writeups, Hope0351/CTF-collection, penetration-test-learn/docs/CTF-Writeups
- web
- jwt
Same technique in picoCTF: Java Code Analysis!?!, JaWT Scratchpad, JAuth
Also written up in: m3ssap0/CTF-Writeups, Hope0351/CTF-collection, penetration-test-learn/docs/CTF-Writeups
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Also written up in: bootplug/writeups
- tcpdump
- portknocking
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Photos
2 official solutionsAlso written up in: srixivas/SecurityNuggets, Srinivas11789/SecurityNuggets
Potato
2 official solutionsAlso written up in: srixivas/SecurityNuggets, Srinivas11789/SecurityNuggets
- ritsec
Same technique in picoCTF: Live Art, secure-email-service, No FA
Binary exploitation9
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: b0th/CTF, b0th/CTF
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
- bin
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: tin-z/mY_Writ3_Up5
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
UPLINK SPEC V1
2 official solutionsAlso written up in: b01lers/b01lers-library, b01lers/b01lers-library
168 999 Bottles
1 official solutionAlso written up in: b01lers/b01lers-library
497 Jit Calc
1 official solutionAlso written up in: b01lers/b01lers-library
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
- bin
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Forensics8
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
Also written up in: srixivas/SecurityNuggets, b0th/CTF, juanjo2297/CTF-writeups, Srinivas11789/SecurityNuggets
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Also written up in: srixivas/SecurityNuggets, b0th/CTF, ioncodes/excusemewtf, Srinivas11789/SecurityNuggets
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Also written up in: srixivas/SecurityNuggets, juanjo2297/CTF-writeups, Srinivas11789/SecurityNuggets
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Also written up in: srixivas/SecurityNuggets, Srinivas11789/SecurityNuggets
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
- forensics
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
486 Urggggg
1 official solutionAlso written up in: b01lers/b01lers-library
- wireshark
- stego
Same technique in picoCTF: Trivial Flag Transfer Protocol, FindAndOpen, Ph4nt0m 1ntrud3r
Usb To Key
1 official solutionAlso written up in: g-0-p-h-e-r/CTF
Misc8
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
- misc
Same technique in picoCTF: PW Crack 2, Codebook, convertme.py
Also written up in: b0th/CTF
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Also written up in: bootplug/writeups
- bain
- misc
- morse
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Alphabetize
1 official solutionAlso written up in: nadrojisk/ctf-writeups
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Steganography3
Find the payload hidden inside a carrier that looks ordinary. Bit planes, appended data, metadata, and audio spectrograms.
Also written up in: m3ssap0/CTF-Writeups, srixivas/SecurityNuggets, Hope0351/CTF-collection, penetration-test-learn/docs/CTF-Writeups, Srinivas11789/SecurityNuggets
- steganography
Same technique in picoCTF: StegoRSA, Glory of the Garden, Investigative Reversing 0
- stego
Same technique in picoCTF: StegoRSA, Glory of the Garden, Investigative Reversing 0
290 Hd Pepe
1 official solutionAlso written up in: b01lers/b01lers-library
Reverse engineering1
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Also written up in: ioncodes/excusemewtf, bannsecurity.com
- patching
- windows
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200