2025weight 23.65FirewallFoxes, pony7

THCon 2K25 CTF

18 challenges with 18 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

OSINT12

Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.

Solve it with:EXIF metadata viewer QR code decoder

[Osint] A strange man…
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Gunnar´s Vacation Picture 1
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Gunnar´s Vacation Picture 2
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Gunnar´s Vacation Picture 3
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Gunnar´s Vacation Picture 4
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Gunnar´s Vacation Picture 5
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Gunnar´s Vacation Picture 6
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Intrusion at THCity Hospital!
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Is that guy really just walking?
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Is this secure?
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Sound Engineer
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
[Osint] Vacation Hideout
1 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX

Binary exploitation2

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Go
1 official solution
Also written up in: rerrorctf/writeups
Gopwn
1 official solution
Also written up in: rerrorctf/writeups

Uncategorised2

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

OneClick
1 official solution
Also written up in: Haalloobim/CTF-Writeup-Notes
OperationShadowLeak
1 official solution
Also written up in: Haalloobim/CTF-Writeup-Notes

Cryptography1

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

[Misc] Roses Crypto Game
1 pts1 writeup
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC

Misc1

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

[Misc] NeoPrivSec
1 pts1 writeup
Same technique in picoCTF: PW Crack 2, Permissions, Specialer

OSINT12

[Osint] A strange man…

[Osint] Gunnar´s Vacation Picture 1

[Osint] Gunnar´s Vacation Picture 2

[Osint] Gunnar´s Vacation Picture 3

[Osint] Gunnar´s Vacation Picture 4

[Osint] Gunnar´s Vacation Picture 5

[Osint] Gunnar´s Vacation Picture 6

[Osint] Intrusion at THCity Hospital!

[Osint] Is that guy really just walking?

[Osint] Is this secure?

[Osint] Sound Engineer

[Osint] Vacation Hideout

Binary exploitation2

Go

Gopwn

Uncategorised2

OneClick

OperationShadowLeak

Cryptography1

[Misc] Roses Crypto Game

Misc1

[Misc] NeoPrivSec

Other 2025 events