saarCTF 2022
113 challenges with 173 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not. 6 of them also carry the solution saarCTF 2022’s own organisers published, which is linked on the challenge itself.
Full task list on CTFtimeUncategorised108
The upstream scoreboard did not say, so neither do we.
Published by the organisers in saarsec/saarctf-2022: exploits/exploit_cross_context_scripting.py, exploits/exploit_logs_hpp_formdata.py, exploits/exploit_logs_hpp.py, exploits/exploit_sqlite_attach.py, exploits/exploit_sqlite_cached_authorization.py, exploits/exploit_unintended_sqli.py
Also written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Published by the organisers in saarsec/saarctf-2022: exploits/connector.py, exploits/exploit_key_derivation.py, exploits/exploit_leak_fd.py, exploits/exploit_steal_master_secret.py
Also written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Gamelib
8 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Published by the organisers in saarsec/saarctf-2022: exploits/exploit_1.py, exploits/exploit_2.py, exploits/utils.py
Also written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Dependencies
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Gamelib Sample
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Howto Build Install
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Howto Checkers
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Howto Exploits
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Retrieve Flags
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Published by the organisers in saarsec/saarctf-2022: exploits/exploit_sample.py, exploits/exploit_synth.py, exploits/saarloop_api.py
Also written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Test Exploits
6 official solutionsAlso written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Published by the organisers in saarsec/saarctf-2022: exploits/exploit_path_traversal.py, exploits/exploit_rop.py
Also written up in: saarsec/saarctf-2022, saarsec/saarctf-2022, saarsec/saarctf-2022
Published by the organisers in saarsec/saarctf-2022: exploits/exploit_1.py, exploits/exploit_2.py
Also written up in: saarsec/saarctf-2022, saarsec/saarctf-2022
Saarbahn Script
2 official solutionsAlso written up in: RobertObkircher/ctf-writeups, RobertObkircher/ctf-writeups
Array Every
1 official solutionAlso written up in: saarsec/saarctf-2022
Array Holes
1 official solutionAlso written up in: saarsec/saarctf-2022
Array Proto Func Length Getter Except
1 official solutionAlso written up in: saarsec/saarctf-2022
Array Proto Func Property Getter Except
1 official solutionAlso written up in: saarsec/saarctf-2022
Array Prototype Properties
1 official solutionAlso written up in: saarsec/saarctf-2022
Bootstrap.Bundle.Min
1 official solutionAlso written up in: saarsec/saarctf-2022
break ASI
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Call
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Declaration
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Default Constructor
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Expression
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Extends
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Name
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Prototype
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Semicolon
1 official solutionAlso written up in: saarsec/saarctf-2022
Class Syntax Super
1 official solutionAlso written up in: saarsec/saarctf-2022
Codegen Peephole Locals
1 official solutionAlso written up in: saarsec/saarctf-2022
Connector
1 official solutionAlso written up in: saarsec/saarctf-2022
Cyclic Prototypes
1 official solutionAlso written up in: saarsec/saarctf-2022
Deep Recursion Test
1 official solutionAlso written up in: saarsec/saarctf-2022
Demo Website Generator
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Abs Backwards Propagation
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Arith Add Overflow Check Elimination Tower Of Large Numbers
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Array Pop Side Effects
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Cfa Merge With Dead Use At Tail
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Check Structure Elimination For Non Cell
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Check Two Structures
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Getter Throw
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Max Backwards Propagation
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Min Backwards Propagation
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Sqrt Backwards Propagation
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Store Unexpected Value Into Argument And Osr Exit
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Uint32 To Number Skip Then Exit
1 official solutionAlso written up in: saarsec/saarctf-2022
Dropdown
1 official solutionAlso written up in: saarsec/saarctf-2022
Early Acid3 86
1 official solutionAlso written up in: saarsec/saarctf-2022
Eval Throw Return
1 official solutionAlso written up in: saarsec/saarctf-2022
Exception For Nonobject
1 official solutionAlso written up in: saarsec/saarctf-2022
Exception Properties
1 official solutionAlso written up in: saarsec/saarctf-2022
Exception With Handler Inside Eval With Dynamic Scope
1 official solutionAlso written up in: saarsec/saarctf-2022
Finally Codegen Failure
1 official solutionAlso written up in: saarsec/saarctf-2022
For In Cached
1 official solutionAlso written up in: saarsec/saarctf-2022
Function Apply
1 official solutionAlso written up in: saarsec/saarctf-2022
Function Constructor Error
1 official solutionAlso written up in: saarsec/saarctf-2022
Function Declaration
1 official solutionAlso written up in: saarsec/saarctf-2022
Function Declarations In Switch Statement
1 official solutionAlso written up in: saarsec/saarctf-2022
Function Prototype Descriptor
1 official solutionAlso written up in: saarsec/saarctf-2022
function toString object literals
1 official solutionAlso written up in: saarsec/saarctf-2022
Generate Jstests
1 official solutionAlso written up in: saarsec/saarctf-2022
Instance Of Immediates
1 official solutionAlso written up in: saarsec/saarctf-2022
Invalid Range In Class
1 official solutionAlso written up in: saarsec/saarctf-2022
Js Continue Break Restrictions
1 official solutionAlso written up in: saarsec/saarctf-2022
JSON parse reviver
1 official solutionAlso written up in: saarsec/saarctf-2022
JSON stringify replacer
1 official solutionAlso written up in: saarsec/saarctf-2022
Keywords And Reserved Words
1 official solutionAlso written up in: saarsec/saarctf-2022
lastIndex
1 official solutionAlso written up in: saarsec/saarctf-2022
Loop Gen
1 official solutionAlso written up in: saarsec/saarctf-2022
Modal
1 official solutionAlso written up in: saarsec/saarctf-2022
Modify Non References
1 official solutionAlso written up in: saarsec/saarctf-2022
Netlink Comms
1 official solutionAlso written up in: saarsec/saarctf-2022
No Semi Insertion At End Of Script
1 official solutionAlso written up in: saarsec/saarctf-2022
number toExponential
1 official solutionAlso written up in: saarsec/saarctf-2022
Number Tofixed
1 official solutionAlso written up in: saarsec/saarctf-2022
Number Toprecision
1 official solutionAlso written up in: saarsec/saarctf-2022
number toString
1 official solutionAlso written up in: saarsec/saarctf-2022
Numeric Escapes In String Literals
1 official solutionAlso written up in: saarsec/saarctf-2022
Object create
1 official solutionAlso written up in: saarsec/saarctf-2022
Object defineProperties
1 official solutionAlso written up in: saarsec/saarctf-2022
Object Extra Comma
1 official solutionAlso written up in: saarsec/saarctf-2022
Object Prototype Properties
1 official solutionAlso written up in: saarsec/saarctf-2022
Order Of Operations
1 official solutionAlso written up in: saarsec/saarctf-2022
Overflow
1 official solutionAlso written up in: saarsec/saarctf-2022
Parser Xml Close Comment
1 official solutionAlso written up in: saarsec/saarctf-2022
preventExtensions
1 official solutionAlso written up in: saarsec/saarctf-2022
Primitive Property Access Edge Cases
1 official solutionAlso written up in: saarsec/saarctf-2022
Read Modify Eval
1 official solutionAlso written up in: saarsec/saarctf-2022
Regexp Compile
1 official solutionAlso written up in: saarsec/saarctf-2022
Regexp No Extensions
1 official solutionAlso written up in: saarsec/saarctf-2022
Reserved Words
1 official solutionAlso written up in: saarsec/saarctf-2022
Reserved Words Strict
1 official solutionAlso written up in: saarsec/saarctf-2022
String Anchor
1 official solutionAlso written up in: saarsec/saarctf-2022
String Fontcolor
1 official solutionAlso written up in: saarsec/saarctf-2022
String Fontsize
1 official solutionAlso written up in: saarsec/saarctf-2022
String Link
1 official solutionAlso written up in: saarsec/saarctf-2022
Templates
1 official solutionAlso written up in: saarsec/saarctf-2022
Tostring Exception In Property Access
1 official solutionAlso written up in: saarsec/saarctf-2022
toString prefix postfix preserve parens
1 official solutionAlso written up in: saarsec/saarctf-2022
Transition
1 official solutionAlso written up in: saarsec/saarctf-2022
Utils
1 official solutionAlso written up in: saarsec/saarctf-2022
Validate Jstests
1 official solutionAlso written up in: saarsec/saarctf-2022
Vardecl Blocks Init
1 official solutionAlso written up in: saarsec/saarctf-2022
Views
1 official solutionAlso written up in: saarsec/saarctf-2022
Visibility
1 official solutionAlso written up in: saarsec/saarctf-2022
Website Generator
1 official solutionAlso written up in: saarsec/saarctf-2022
Misc4
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Dfg Compare Final Object To Final Object Or Other When Both Proven Final Object
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Compare Final Object To Final Object Or Other When Proven Final Object
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Peephole Compare Final Object To Final Object Or Other When Both Proven Final Object
1 official solutionAlso written up in: saarsec/saarctf-2022
Dfg Peephole Compare Final Object To Final Object Or Other When Proven Final Object
1 official solutionAlso written up in: saarsec/saarctf-2022
Cryptography1
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Utils Crypto
1 official solutionAlso written up in: saarsec/saarctf-2022