2016from public repositories

Su Ctf 2016

41 challenges with 201 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.

Where these writeups live

Cryptography9

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

Blueprint
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
British Elevator 350
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Hail Zeus 300
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
High Speed Rsa Keygen 150
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Huge 250
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Rail Fence Cipher 50
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Smooth As Silk 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
The Russian Attack 500
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Ure 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Reverse engineering8

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

Interpolation 200
6 official solutions
Also written up in: ctfs/write-ups-2016, raccoons-team/ctf, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
App 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Dmd 50
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Hi 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Maze 400
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Serial 150
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Srm 50
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Wincc 300
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Forensics7

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytes Magic byte and file signature table PCAP analyzer for CTF network forensics EXIF metadata viewer Learn: File forensics and carving Learn: Network forensics

Memdump 400
6 official solutions
Also written up in: ctfs/write-ups-2016, raccoons-team/ctf, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Blocks 400
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Dumped 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Kick Tort Teen 50
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Uagent 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
We Lost The Fashion Flag 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Misc6

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Asian Cheetah 50
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Hack By The Sound 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Impossible Game 300
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Sec Coding 1 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Sec Coding 2 300
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Server
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Binary exploitation4

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Echo 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Kiuar 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Login To System 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Sql 150
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Web4

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

Hackme 400
6 official solutions
Also written up in: ctfs/write-ups-2016, raccoons-team/ctf, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Oldpersian 250
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Photoblog 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Technews 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Uncategorised3

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

Dumped
3 official solutions
Also written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
We Lost The Fashion Flag
3 official solutions
Also written up in: VulnHub/ctf-writeups, vulnhub/ctf-writeups, hcs0/ctf-writeups
High Speed Rsa Keygen
2 official solutions
Also written up in: sonickun/ctf-crypto-writeups, sonickun/ctf-crypto-writeups

Other 2016 events