2015weight 20.00hxp

TUM CTF Teaser

28 challenges with 109 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Cryptography6

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

Sudhackar
8 official solutions
Also written up in: ByteBandits/writeups, ByteBandits/writeups, ByteBandits/writeups, Hope0351/CTF-collection, Hope0351/CTF-collection, Hope0351/CTF-collection, ByteBandits/writeups, Hope0351/CTF-collection
bad_apple
15 pts1 writeup
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Turbo
100 pts1 writeup
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC
Linear
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Pudel
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Really Slow Arithmetic
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015

Binary exploitation6

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

c0unter
25 pts1 writeup
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015, ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, shift-crops/CTFWriteups, TycoRyco/write-ups-2015
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
greeter
15 pts1 writeup
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- exploiting
- pwn
- format string
Same technique in picoCTF: PIE TIME 2, Binary Gauntlet 2, Binary Gauntlet 3
Gaming
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Lame Nayn
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Scge
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Unlame Nayn
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015

Misc6

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

Sanity Check
1 pts4 writeups
Also written up in: dfcictf/ctf-writeups2015
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
t9
9 pts1 writeup
Also written up in: ctfs/write-ups-2015, dfcictf/ctf-writeups2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- misc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Check
4 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015, vimvaders.github.io
Autoagressive Desensitization
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Circ
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
"Autoaggressive Desensitization"
2 official solutions
Also written up in: hxp.io, hxp.io

Reverse engineering5

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

whitebox crypto
20 pts2 writeups
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
selftest
10 pts1 writeup
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- reverse engineering
Same technique in picoCTF: Checkpass, WinAntiDbg0x100, WinAntiDbg0x200
B0rked Screens4ver
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Qqqshit
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
Quine
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015

Web3

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

neocities
20 pts4 writeups
Also written up in: ctfs/write-ups-2015, pcchou/ctf-writeups, dfcictf/ctf-writeups2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- web
- lfi
Same technique in picoCTF: Secrets, cancri-sp, notepad
Italy Food
200 pts2 writeups
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015
- xmpp
- xml
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA
Webshop
3 official solutions
Also written up in: ctfs/write-ups-2015, AntiRootkit1/write-ups-2015, TycoRyco/write-ups-2015

Uncategorised2

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

Crypto150 "Really Slow Arithmetic"
2 official solutions
Also written up in: hxp.io, hxp.io
Bruteflagfile
1 official solution
Also written up in: dfcictf/ctf-writeups2015

Other 2015 events