2019weight 9.00Trend Micro

Trend Micro CTF 2019 - Raimund Genes Cup - Online Qualifier

11 challenges with 14 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Forensics4

Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.

Solve it with:File type identifier by magic bytes Magic byte and file signature table PCAP analyzer for CTF network forensics EXIF metadata viewer Learn: File forensics and carving Learn: Network forensics

Combo 100 (World trip)
100 pts1 writeup
- vbs
- vbscript
- forensics
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
Forensics 100 (Knocks)
100 pts1 writeup
- portknocking
- pcap
- forensics
Same technique in picoCTF: FindAndOpen, WebNet0, WebNet1
Mobile 100
100 pts1 writeup
- adb
- pcap
- android
Same technique in picoCTF: FindAndOpen, WebNet0, WebNet1
Wildcard 400
400 pts1 writeup
- network_securtity
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions

Reverse engineering2

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

Exploit 300 (Java jail)
300 pts2 writeups
- deserialize
- java
- xxe
- spel
Same technique in picoCTF: vault-door-1, vault-door-3, vault-door-4
IoT 200
200 pts1 writeup
- reverse
- guessing
Same technique in picoCTF: WinAntiDbg0x100, WinAntiDbg0x200, WinAntiDbg0x300

Misc2

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

IoT 100
100 pts1 writeup
- iot
Same technique in picoCTF: Permissions, Specialer, Codebook
Wildcard 100
100 pts1 writeup
- machine_learning
Same technique in picoCTF: Permissions, Specialer, Codebook

Binary exploitation1

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Exploit 400 ChakraCore
400 pts2 writeups
- javascript
- pwn
- jit
Same technique in picoCTF: Guessing Game 1, x-sixty-what, format string 3

Steganography1

Find the payload hidden inside a carrier that looks ordinary. Bit planes, appended data, metadata, and audio spectrograms.

Solve it with:LSB steganography extractor PNG chunk analyzer Audio spectrogram and SSTV decoder Zero-width character and text steganography decoder Learn: Steganography

RE 100
100 pts2 writeups
- stegano
- forensics
- re
Same technique in picoCTF: FindAndOpen, StegoRSA, Glory of the Garden

OSINT1

Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.

Solve it with:EXIF metadata viewer QR code decoder

Combo 300
300 pts1 writeup
- git
- osint
- github
Same technique in picoCTF: Blame Game, Collaborative Development, Commitment Issues

Forensics4

Combo 100 (World trip)

Forensics 100 (Knocks)

Mobile 100

Wildcard 400

Reverse engineering2

Exploit 300 (Java jail)

IoT 200

Misc2

IoT 100

Wildcard 100

Binary exploitation1

Exploit 400 ChakraCore

Steganography1

RE 100

OSINT1

Combo 300

Other 2019 events