saarCTF 2025
38 challenges with 93 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not. 8 of them also carry the solution saarCTF 2025’s own organisers published, which is linked on the challenge itself.
Full task list on CTFtimeUncategorised33
The upstream scoreboard did not say, so neither do we.
Published by the organisers in saarsec/saarctf-2025: exploits/exploit_idor_note.py, exploits/exploit_local_admin_all_invoices.py, exploits/exploit_type_confusion_requests.py, exploits/first-names.txt, exploits/last-names.txt, exploits/routerploit_lib.py
Also written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/exploit_call.py, exploits/exploit_copy.py, exploits/exploit_mklink.py, exploits/no_service_1.py, exploits/password-reset.py
Also written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/README.md, exploits/client.py, exploits/exploit_request_smuggling_manual.py, exploits/exploit_sqli.py, exploits/unreliable_exploit_request_smuggling.py
Also written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/exploit_heap_glibc_2.41-12.py, exploits/exploit_lua.py, exploits/heap_glibc_2.40-4.py, exploits/heap_glibc_2.41-4.py
Also written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Connections
8 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Gamelib
8 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Gamelib Sample
8 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Test Exploits
8 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Wrapped Interface
8 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025, saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/exploit_logfile.py
Also written up in: saarsec/saarctf-2025
Build
2 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025
Interface
2 official solutionsAlso written up in: saarsec/saarctf-2025, saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/exploit_iv_rce.py
Also written up in: saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/README.md
Also written up in: saarsec/saarctf-2025
Published by the organisers in saarsec/saarctf-2025: exploits/exploit_lcg.py
Also written up in: saarsec/saarctf-2025
Also written up in: saarsec/saarctf-2025
All.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
Also written up in: saarsec/saarctf-2025
Brands
1 official solutionAlso written up in: saarsec/saarctf-2025
Brands.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
Conflict Detection.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
Fontawesome
1 official solutionAlso written up in: saarsec/saarctf-2025
Fontawesome.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
Also written up in: saarsec/saarctf-2025
Httplib
1 official solutionAlso written up in: saarsec/saarctf-2025
Also written up in: saarsec/saarctf-2025
Regular
1 official solutionAlso written up in: saarsec/saarctf-2025
Regular.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
Routerploit Lib
1 official solutionAlso written up in: saarsec/saarctf-2025
Solid
1 official solutionAlso written up in: saarsec/saarctf-2025
Solid.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
V4 Shims
1 official solutionAlso written up in: saarsec/saarctf-2025
V4 Shims.Min
1 official solutionAlso written up in: saarsec/saarctf-2025
Web3
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: saarsec/saarctf-2025
Bigint Crypto Utils
1 official solutionAlso written up in: saarsec/saarctf-2025
Users
1 official solutionAlso written up in: saarsec/saarctf-2025
Binary exploitation1
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Builder
1 official solutionAlso written up in: saarsec/saarctf-2025
Misc1
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
Common
1 official solutionAlso written up in: saarsec/saarctf-2025