2024from public repositories

Texsaw CTF 2024

8 challenges with 12 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.

Where these writeups live

Web3

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

Ask And It Shall Be Given To You
1 official solution
Also written up in: nightxade/ctf-writeups
Extreme Security
1 official solution
Also written up in: nightxade/ctf-writeups
Over 9000
1 official solution
Also written up in: nightxade/ctf-writeups

OSINT2

Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.

Solve it with:EXIF metadata viewer QR code decoder

Geo Location
1 official solution
Also written up in: nightxade/ctf-writeups
Sherlock
1 official solution
Also written up in: nightxade/ctf-writeups

Uncategorised1

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

Chall
5 official solutions
Also written up in: dennyabrahamsinaga/ctf-writeup, dennyabrahamsinaga/ctf-writeup, dennyabrahamsinaga/ctf-writeup, dennyabrahamsinaga/ctf-writeup, dennyabrahamsinaga/ctf-writeup

Cryptography1

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it