2018weight 16.92Trend Micro

Trend Micro CTF 2018 - Raimund Genes Cup - Online Qualifier

16 challenges with 31 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Cryptography6

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

Forensics-Crypto 1 400
400 pts3 writeups
- crypto
- xor
Same technique in picoCTF: Custom encryption, XtraORdinary, It's Not My Fault 2
Offensive-Analysis 300
300 pts3 writeups
- crypto
- rsa
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, john_pollard
Offensive-Analysis 400
400 pts3 writeups
- aes-cbc
- crypto
Same technique in picoCTF: AES-ABC, Compress and Attack, cryptomaze
Forensics-Crypto 2 100
100 pts1 writeup
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Forensics-Crypto 2 300
300 pts1 writeup
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Reversing-Binary 100
100 pts1 writeup
- py2exe
- crypto
- re
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC

Forensics3

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytes Magic byte and file signature table PCAP analyzer for CTF network forensics EXIF metadata viewer Learn: File forensics and carving Learn: Network forensics

Forensics-Crypto 2 200 (DeepDive)
200 pts2 writeups
- pcap
- pyinstaller
Same technique in picoCTF: FindAndOpen, Ph4nt0m 1ntrud3r, WebNet0
Misc 200 (Constellation)
200 pts2 writeups
- pcap
- forensics
- plot
Same technique in picoCTF: FindAndOpen, Ph4nt0m 1ntrud3r, WebNet0
Forensics-Crypto 1 200 (Ocean of sockets)
200 pts1 writeup
- forensics
- crypto
Same technique in picoCTF: investigation_encoded_2, FindAndOpen, Ph4nt0m 1ntrud3r

Misc3

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Misc 100
100 pts3 writeups
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Forensics-Crypto 1 100
100 pts1 writeup
- qr
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Offensive-Analysis 200
200 pts1 writeup
Same technique in picoCTF: PW Crack 2, Permissions, Specialer

Binary exploitation2

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Reversing-Binary 300
300 pts1 writeup
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Reversing-Binary 400
400 pts1 writeup
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz

Reverse engineering2

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

Misc 300
300 pts4 writeups
- misc
- serialize
- java
Same technique in picoCTF: vault-door-1, vault-door-3, vault-door-4
Re Other 400 (Parsletongue)
400 pts3 writeups
- python
- re
- pyc
Same technique in picoCTF: keygenme-py, Shop, patchme.py

Cryptography6

Forensics-Crypto 1 400

Offensive-Analysis 300

Offensive-Analysis 400

Forensics-Crypto 2 100

Forensics-Crypto 2 300

Reversing-Binary 100

Forensics3

Forensics-Crypto 2 200 (DeepDive)

Misc 200 (Constellation)

Forensics-Crypto 1 200 (Ocean of sockets)

Misc3

Misc 100

Forensics-Crypto 1 100

Offensive-Analysis 200

Binary exploitation2

Reversing-Binary 300

Reversing-Binary 400

Reverse engineering2

Misc 300

Re Other 400 (Parsletongue)

Other 2018 events