2016weight 23.10Koibasta

VolgaCTF 2016 Quals

40 challenges with 153 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.

Full task list on CTFtime

Misc9

Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.

Solve it with:Brainfuck and esolang decoder Cipher identifier and automatic decoder Regex tester with match offsets and capture groups Learn: Recognising encodings

YACST2
350 pts4 writeups
Also written up in: EspacioTeam/write-ups, EspacioTeam/write-ups
- ppc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Amazing 250
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Secure Image 250
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Tic Tac Toe 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Yacst2 350
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Amazing
250 pts1 writeup
Also written up in: EspacioTeam/write-ups, EspacioTeam/write-ups
- ppc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Image Archeology
350 pts2 writeups
Also written up in: p4-team/ctf
- admin
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
Eva
300 pts1 writeup
- raid
- admin
Same technique in picoCTF: PW Crack 2, Permissions, Specialer
TicTacToe
200 pts1 writeup
- ppc
Same technique in picoCTF: PW Crack 2, Permissions, Specialer

Uncategorised9

The upstream scoreboard did not say, so neither do we.

Solve it with:Cipher identifier and automatic decoder Learn: Recognising encodings

Eva 300
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Image Archeology 350
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Shiver Pc 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
crypto300 "XXY"
2 official solutions
Also written up in: hxp.io, hxp.io
crypto600 "Five Blocks"
2 official solutions
Also written up in: hxp.io, hxp.io
Transformer
2 official solutions
Also written up in: sea0breeze/ctf, sea0breeze/ctf
2016 03 25 YACST2
1 official solution
Also written up in: Corb3nik/Corb3nik.github.io
Captcha
1 official solution
Also written up in: p4-team/ctf
Yacs2
1 official solution
Also written up in: p4-team/ctf

Cryptography7

Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.

Solve it with:Cipher identifier and automatic decoder Vigenere cipher solver with automatic key recovery RSA decryption and attack runner Wiener’s attack on small RSA private exponents In-browser hash cracker with rule transforms Learn: Classical ciphers and frequency analysis Learn: RSA and the parameters that break it

Ask The Oracle 400
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Ciphers
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Five Blocks 600
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Lazy 250
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Quiz 10
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Xxy 300
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
lazy
250 pts2 writeups
Also written up in: smokeleeteveryday/CTF_WRITEUPS, smokeleeteveryday/CTF_WRITEUPS
- crypto
Same technique in picoCTF: It's Not My Fault 2, StegoRSA, AES-ABC

Binary exploitation7

Turn a memory-safety bug in a native binary into control of execution. Usually a stack overflow, a format string, or a heap primitive.

Solve it with:ROP gadget finder Shellcode assembler and library Cyclic pattern generator and offset finder Format string exploit builder Learn: Binary exploitation

Of Science 2 350
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Of Science 250
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Of Science 3 400
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Web of Science
250 pts3 writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Web of Science 2
350 pts3 writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz
Of Science
2 official solutions
Also written up in: b01lers/writeups, blahcat.github.io
Web of Science 3
400 pts2 writeups
- pwn
Same technique in picoCTF: lockdown-horses, Guessing Game 1, Bizz Fuzz

Web4

Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.

Solve it with:JWT decoder and signature verifier JWT alg=none bypass generator Web attack payload catalog JWT secret brute force Learn: Sessions, tokens and access control

Just Listen 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Optional Cats 150
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Undesired Resource 350
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Optional Cats
150 pts1 writeup
- web
Same technique in picoCTF: Live Art, secure-email-service, No FA

Reverse engineering3

Work out what a compiled program does without its source, then work backwards from the check to the input that passes it.

Solve it with:Strings extractor for binaries and blobs WebAssembly disassembler Java .class disassembler Python .pyc bytecode disassembler Learn: Binary exploitation

Broken 200
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Multiple Shift 500
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016
Transformer 400
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Steganography1

Find the payload hidden inside a carrier that looks ordinary. Bit planes, appended data, metadata, and audio spectrograms.

Solve it with:LSB steganography extractor PNG chunk analyzer Audio spectrogram and SSTV decoder Zero-width character and text steganography decoder Learn: Steganography

Remastered 100
5 official solutions
Also written up in: ctfs/write-ups-2016, epicleet/write-ups-2016, jashanbhoora/write-ups-2016, Niccher/write-ups-2016, vishwaraj/write-ups-2016

Misc9

YACST2

Amazing 250

Secure Image 250

Tic Tac Toe 200

Yacst2 350

Amazing

Image Archeology

Eva

TicTacToe

Uncategorised9

Eva 300

Image Archeology 350

Shiver Pc 100

crypto300 "XXY"

crypto600 "Five Blocks"

Transformer

2016 03 25 YACST2

Captcha

Yacs2

Cryptography7

Ask The Oracle 400

Ciphers

Five Blocks 600

Lazy 250

Quiz 10

Xxy 300

lazy

Binary exploitation7

Of Science 2 350

Of Science 250

Of Science 3 400

Web of Science

Web of Science 2

Of Science

Web of Science 3

Web4

Just Listen 200

Optional Cats 150

Undesired Resource 350

Optional Cats

Reverse engineering3

Broken 200

Multiple Shift 500

Transformer 400

Steganography1

Remastered 100

Other 2016 events