TokyoWesterns CTF 5th 2019
43 challenges with 151 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeUncategorised23
The upstream scoreboard did not say, so neither do we.
Problem
7 official solutionsAlso written up in: p4-team/ctf, NicolaiSoeborg/ctf-writeups, kernelpoppers/ctf_writeups, MarcoGarlet/CTF-Writeups, wr47h/CTF-Writeups, c00c00r00c00/writeups, m4rt1n0/ctf-write-ups
Encrypt
4 official solutionsAlso written up in: p4-team/ctf, NicolaiSoeborg/ctf-writeups, wr47h/CTF-Writeups, m4rt1n0/ctf-write-ups
Baby Rsa
2 official solutionsAlso written up in: p4-team/ctf, c00c00r00c00/writeups
Ebc Ida Proc Module
2 official solutionsAlso written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups
Pages from UEFI Spec 2 8 final unlocked
2 official solutionsAlso written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups
Uefi Structs
2 official solutionsAlso written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups
Astrisk Alloc
1 official solutionAlso written up in: HexRabbit/CTF-writeup
Also written up in: p4-team/ctf
Crack
1 official solutionAlso written up in: NicolaiSoeborg/ctf-writeups
Decompilation
1 official solutionAlso written up in: wr47h/CTF-Writeups
Ebc Crack
1 official solutionAlso written up in: ispoleet/ctf-writeups
Ebc Decode Payload
1 official solutionAlso written up in: ispoleet/ctf-writeups
Also written up in: MarcoGarlet/CTF-Writeups
Flag Finder
1 official solutionAlso written up in: wr47h/CTF-Writeups
Holy Grail War Crack
1 official solutionAlso written up in: ispoleet/ctf-writeups
M Poly Cipher Crack
1 official solutionAlso written up in: ispoleet/ctf-writeups
Also written up in: ispoleet/ctf-writeups
Meow.ko
1 official solutionAlso written up in: Tekiter/CTF-writeups
Nothingmore
1 official solutionAlso written up in: smallkirby/pwn-writeups
Payload Stage 1
1 official solutionAlso written up in: ispoleet/ctf-writeups
Payload Stage 2
1 official solutionAlso written up in: ispoleet/ctf-writeups
Payload Stage 3
1 official solutionAlso written up in: ispoleet/ctf-writeups
Payload Stage 4
1 official solutionAlso written up in: ispoleet/ctf-writeups
Binary exploitation7
Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.
Also written up in: kernelpoppers/ctf_writeups, perfectblue/ctf-writeups, kernelpoppers/ctf_writeups, wr47h/CTF-Writeups, wr47h/CTF-Writeups, rollsafe/ctf-writeups
- pwn
- warmup
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups, perfectblue/ctf-writeups, smallkirby/pwn-writeups, rollsafe/ctf-writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups, perfectblue/ctf-writeups, rollsafe/ctf-writeups, shift-crops/CTFWriteups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: perfectblue/ctf-writeups, rollsafe/ctf-writeups, shift-crops/CTFWriteups
- pwn
Same technique in picoCTF: vr-school, sice_cream, zero_to_hero
Also written up in: shift-crops/CTFWriteups, rpis.ec
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Also written up in: HexRabbit/CTF-writeup, shift-crops/CTFWriteups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Reverse engineering6
Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.
Also written up in: kernelpoppers/ctf_writeups, goseungduk/CTF_WriteUp, huymath2/RE, wr47h/CTF-Writeups, meowmeowxw.gitlab.io
- warmup
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: p4-team/ctf, oalieno/CTF, ispoleet/ctf-writeups, OAlienO/CTF, p4-team/ctf, oalieno/CTF, OAlienO/CTF
- reverse
- crypto
- reversing
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: perfectblue/ctf-writeups, ispoleet/ctf-writeups, rollsafe/ctf-writeups, perfectblue/ctf-writeups, rollsafe/ctf-writeups
- reversing
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: p4-team/ctf, kernelpoppers/ctf_writeups, Tekiter/CTF-writeups
- engineering
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Also written up in: ispoleet/ctf-writeups
- reverse
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Ebc(Fail)
1 official solutionAlso written up in: goseungduk/CTF_WriteUp
Web4
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Also written up in: NicolaiSoeborg/ctf-writeups, 10secTW/ctf-writeup
- web
- warmup
Same technique in picoCTF: Live Art, secure-email-service, No FA
Also written up in: Universe1122/CTF
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Oneline Calc
2 writeups- seccomp
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Cryptography3
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
Also written up in: 10secTW/ctf-writeup, kernelpoppers/ctf_writeups, c00c00r00c00/writeups, m4rt1n0/ctf-write-ups, pwang00/CTF-Writeups, wr47h/CTF-Writeups, m4rt1n0/ctf-write-ups, pwang00/CTF-Writeups
- warmup
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
Also written up in: p4-team/ctf, 10secTW/ctf-writeup, m4rt1n0/ctf-write-ups, wr47h/CTF-Writeups
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Also written up in: p4-team/ctf, pwang00/CTF-Writeups, pwang00/CTF-Writeups, pwang00/CTF-Writeups
- lattice
- crypto
- rsa
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard