WORMCON 0x01
29 challenges with 33 published community solutions between them. Solution links go to CTFtime’s task page, which aggregates every writeup for a challenge - individual blog posts rot, the aggregator does not.
Full task list on CTFtimeForensics10
Recover something from a file, a capture, or a disk image - often from a part of it the format says is unused.
- forensics
- thunderbird
- digital-forensics
- disk-imaging
- ftkimager
Same technique in picoCTF: Sleuthkit Apprentice, Sleuthkit Intro, UnforgottenBits
- iot
- forensics
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
- wireshark
- file_recovery
- ftp
Same technique in picoCTF: FindAndOpen, WebNet0, WebNet1
- voip
- pcap2wav
- wireshark
Same technique in picoCTF: FindAndOpen, WebNet0, WebNet1
- wifi_cracking
- wlan
- aircrack
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
- malware
- forensics
- javascript
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
- tor
- registry
- forensics
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
- forensics
- logic-analyzer
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
- emails
- ftkimager
- forensics
- vba
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
- malware
- forensics
- powershell
- virustotal
Same technique in picoCTF: FindAndOpen, c0rrupt, extensions
Web7
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
- htaccess
- web
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
- csrf
- web
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
- http
- wireshark
- xor
Same technique in picoCTF: Some Assembly Required 3, Client-side-again, dont-use-client-side
- php
- web
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
- web
- ssti
- flask
Same technique in picoCTF: Bithug, Startup Company, SSTI2
- web
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
- web
Same technique in picoCTF: Client-side-again, dont-use-client-side, Irish-Name-Repo 3
Cryptography5
Recover a plaintext or a key from something that was supposed to protect it. In practice: identify the scheme, find the parameter the author got wrong, exploit it.
- cryptography
- blockchain
- secp256k1
- bitcoin
- crypto
Same technique in picoCTF: StegoRSA, Timestamped Secrets, AES-ABC
- crypto
- xor
Same technique in picoCTF: Custom encryption, triple-secure, XtraORdinary
- crypto
- png
- ecb
- des
Same technique in picoCTF: StegoRSA, Timestamped Secrets, AES-ABC
- frequency-analysis
- crypto
- substitution
Same technique in picoCTF: StegoRSA, Timestamped Secrets, AES-ABC
- bitcoin
- blockchain
- secp256k1
- rsa
- crypto
- cryptography
Same technique in picoCTF: StegoRSA, john_pollard, rsa_oracle
OSINT5
Answer a question about the real world from public sources. The work is pivoting between identifiers, not exploiting anything.
- osint
Same technique in picoCTF: Permissions, Specialer, Codebook
- osint
Same technique in picoCTF: Permissions, Specialer, Codebook
- osint
- github
Same technique in picoCTF: Blame Game, Collaborative Development, Commitment Issues
- cctld
- osint
Same technique in picoCTF: Permissions, Specialer, Codebook
- osint
- bitcoin
Same technique in picoCTF: Permissions, Specialer, Codebook
Misc2
Everything that fits no other box: esolangs, puzzles, scripting exercises, and the jail escapes that have not yet earned their own category.
- iot
Same technique in picoCTF: Permissions, Specialer, Codebook
- python3
- fernet
- iot
Same technique in picoCTF: PW Crack 1, PW Crack 2, PW Crack 3