TastelessCTF 2019
8 challenges with 19 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeBinary exploitation4
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: mephi42/ctf, leesh3288/CTF, ENOFLAG/writeups, leesh3288/CTF
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: Ex-Origin/ctf-writeups, fei9747/ctf-writeups
- heap
- pwn
Same technique in picoCTF: vr-school, sice_cream, zero_to_hero
- trustzone
- pwn
- aarch64
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Web2
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: ENOFLAG/writeups
- web
- time
Same technique in picoCTF: Live Art, secure-email-service, No FA
- web
- xss
Same technique in picoCTF: Live Art, secure-email-service, msfroggenerator2
Cryptography1
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: ENOFLAG/writeups, leesh3288/CTF, r4b3rt/writeups
- one-time-pad
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Uncategorised1
The upstream scoreboard did not say, so neither do we.
Cssleak
1 official solutionAlso written up in: BlackFan/ctfs