2017weight 21.00Trend Micro

Trend Micro CTF 2017 - Raimund Genes Cup - Online Qualifier

19 challenges with 24 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Reverse engineering5

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

Analysis-Offensive 300
300 pts2 writeups
- reverse
- android
Same technique in picoCTF: droids3, droids4, droids0
Reversing 300
300 pts2 writeups
- re
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
1
1 official solution
Also written up in: sces60107/CTF-writeup
Reverse 200
200 pts1 writeup
- re
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
Revrese 100
100 pts1 writeup
- re
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200

Forensics4

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytes Magic byte and file signature table PCAP analyzer for CTF network forensics EXIF metadata viewer Learn: File forensics and carving Learn: Network forensics

Forensic 100
100 pts2 writeups
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Forensic 200
200 pts2 writeups
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Forensic 300
300 pts1 writeup
- forensic
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r
Misc 400
400 pts1 writeup
- forensic
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r

Misc4

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Analysis-Offensive 100
100 pts1 writeup
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Analysis-Offensive 200
200 pts1 writeup
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Misc 100
100 pts1 writeup
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Misc 200
200 pts1 writeup
Same technique in picoCTF: PW Crack 2, Permissions, Specialer

OSINT3

Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.

Solve it with:EXIF metadata viewer QR code decoder

OSINT/ICS 100
100 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
OSINT/ICS 200
200 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX
OSINT/ICS 300
300 pts1 writeup
Same technique in picoCTF: CVE-XXXX-XXXX

Uncategorised3

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

Sudhackar
2 official solutions
Also written up in: ByteBandits/writeups, Hope0351/CTF-collection
For100
1 official solution
Also written up in: koffiedrinker/writeups
For200
1 official solution
Also written up in: koffiedrinker/writeups

Reverse engineering5

Analysis-Offensive 300

Reversing 300

1

Reverse 200

Revrese 100

Forensics4

Forensic 100

Forensic 200

Forensic 300

Misc 400

Misc4

Analysis-Offensive 100

Analysis-Offensive 200

Misc 100

Misc 200

OSINT3

OSINT/ICS 100

OSINT/ICS 200

OSINT/ICS 300

Uncategorised3

Sudhackar

For100

For200

Other 2017 events