UIUCTF 2023 – Three-time pad

0xL4ughctf 2024 - Wordpress 1

Wordpress forensics bruteforce username, passwords and method used

0xL4ughctf 2024 - Wordpress 2

Wordpress forensics tools used by attacker and CVE associated

0xL4ughctf 2024 - Wordpress 3

BlueHensCTF 2023 – Python Jail / Harder

BlueHensCTF 2023 - RSA School 3rd Grade

BlueHensCTF 2023 - RSA School 5th Grade

Delving into the nuances of the Subset Sum Problem, complemented by the humor of XKCD.

BlueHensCTF 2023 - Appetizers

Exploiting an incorrectly configured Firebase database to reveal hidden data.

BlueHensCTF 2023 - Best Bathroom on Campus

Extracting hidden information by analyzing the least significant bits of an image.

BlueHensCTF 2023 - Least Significant Color

BuckeyeCTF 2023 – 8ball

HTTP parameter pollution attack leading to LFI

BuckeyeCTF 2023 – Stray

BuckeyeCTF 2023 – Text Adventure API

BuckeyeCTF 2023 – area51

BlueHensCTF 2023 - RSA School 6th Grade

PatriotCTF 2023 – FlowerShop

SSTI in Web pokemon starter pick challenge

PatriotCTF 2023 – PickYourStarter

DownUnderCTF 2023 – Downunderflow

DownUnderCTF 2023 – Faraday

Random seed but with low value that can be bruteforced

DownUnderCTF 2023 – Randomly chosen

Unity3D Gacha Game system : Solved using DNSpy, Cheatengine and Wireshark as no server side verification

SEKAI CTF 2023 – Azusawa's Gacha World

Exploit example of a bufferoverflow on the OSCP exam

OSCP Buffer overflow guide

Exploit zip with ascci SHA 1 representation

BYUCTF 2023 – PBKDF2

Python jail with blacklist containg all letters + "." Unicode and octal is key

BYUCTF 2023 – a-z0-9

BYUCTF 2023 – abcdefghijklm

Python jail with no builtins, using os._wrap_close to get the flag

BYUCTF 2023 – Builtins 1

Python jail with no builtins, "__" filters and size limitation. Unicode and _frozen_importlib_external.FileLoader was the solution

BYUCTF 2023 – Builtins 2

BYUCTF 2023 – KCPassword

Getting secrets through stacktraces with flask

BYUCTF 2023 – urmombotnetdotnet - 1

BYUCTF 2023 – urmombotnetdotnet - 2

BYUCTF 2023 – urmombotnetdotnet - 3

BYUCTF 2023 – urmombotnetdotnet - 4

BYUCTF 2023 – urmombotnetdotnet - 5

ImaginaryCTF 2023 – Web

n00bzCTF 2023 – Crack & Crack

Google form misconfiguration permitting to see previous responses

n00bzCTF 2023 – Google Form 2

Python jail with a huge blacklist. If we can't bypass the blacklist, let's delete the blacklist using pop

n00bzCTF 2023 – Pyjail 1

PCAP capture with RCE on the system through webshell

TFCCTF 2023 – List

An encrypted zip file, with partial knowledge of a file content

TFCCTF 2023 – MCTEENX

TFCCTF 2023 – My first calculator

Python jail with blacklist containg all letters + "." + cmd restrictions. Unicode and octal is key

All Posts

UIUCTF 2023 – Three-time pad