saarCTF 2024
36 challenges with 78 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not. 6 of them also carry the solution saarCTF 2024’s own organisers published, which is linked on the challenge itself.
Full task list on CTFtimeUncategorised32
The upstream scoreboard did not say, so neither do we.
Published by the organisers in saarsec/saarctf-2024: exploits/evilprinter.py, exploits/exploit_open_udp.py, exploits/exploit_url_for.py, exploits/lib.py
Also written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Published by the organisers in saarsec/saarctf-2024: exploits/exploit_array.py, exploits/exploit_audio.py, exploits/exploit_text.py, exploits/usernames.py
Also written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Gamelib
8 official solutionsAlso written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Published by the organisers in saarsec/saarctf-2024: exploits/exploit_sh.py, exploits/ReplicatedRandom.java
Also written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Published by the organisers in saarsec/saarctf-2024: exploits/api.py, exploits/exploit_slow_requests.py, exploits/exploit_sth_hash_collision.py
Also written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Connections
6 official solutionsAlso written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Dependencies
6 official solutionsAlso written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Gamelib Sample
6 official solutionsAlso written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Test Exploits
6 official solutionsAlso written up in: saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024, saarsec/saarctf-2024
Published by the organisers in saarsec/saarctf-2024: exploits/exploit_1_pageno.py, exploits/exploit_2_impersonate.py
Also written up in: saarsec/saarctf-2024, saarsec/saarctf-2024
Published by the organisers in saarsec/saarctf-2024: exploits/exploit_wrong_lib_version.py
Also written up in: saarsec/saarctf-2024
Also written up in: saarsec/saarctf-2024, saarsec/saarctf-2024
Also written up in: saarsec/saarctf-2024
Array
1 official solutionAlso written up in: saarsec/saarctf-2024
Client
1 official solutionAlso written up in: saarsec/saarctf-2024
Demo Qr
1 official solutionAlso written up in: saarsec/saarctf-2024
Editor
1 official solutionAlso written up in: saarsec/saarctf-2024
Forge Crc32
1 official solutionAlso written up in: saarsec/saarctf-2024
Job 00001
1 official solutionAlso written up in: saarsec/saarctf-2024
Also written up in: saarsec/saarctf-2024
Merkle Tree
1 official solutionAlso written up in: saarsec/saarctf-2024
Obfuscate
1 official solutionAlso written up in: saarsec/saarctf-2024
Oracle
1 official solutionAlso written up in: saarsec/saarctf-2024
Overview
1 official solutionAlso written up in: saarsec/saarctf-2024
Printers
1 official solutionAlso written up in: saarsec/saarctf-2024
Repository
1 official solutionAlso written up in: saarsec/saarctf-2024
Saarsec Branding
1 official solutionAlso written up in: saarsec/saarctf-2024
Saarsec Watermark
1 official solutionAlso written up in: saarsec/saarctf-2024
Saarsec Watermark 2
1 official solutionAlso written up in: saarsec/saarctf-2024
Serialization
1 official solutionAlso written up in: saarsec/saarctf-2024
Serialization Test
1 official solutionAlso written up in: saarsec/saarctf-2024
Websocket
1 official solutionAlso written up in: saarsec/saarctf-2024
Cryptography3
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: saarsec/saarctf-2024
Also written up in: saarsec/saarctf-2024
Also written up in: saarsec/saarctf-2024
Web1
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Petite Vue.Es
1 official solutionAlso written up in: saarsec/saarctf-2024