Background In early October 2023, Google announced a new addition to their reward program, v8CTF. According to the rules: “v8CTF is a part of the Google VRP in which we reward successful exploitat...
night.js - ASIS CTF 2023 - Pwn - 11 Solves Initial Analysis night.js was a pwnable challenge from this year’s ASIS CTF. Downloading the challenge files showed that this challenge involved serenit...
tinyvm Score: 188 Solved by 22 Teams Clone-and-Pwn, difficulty:Baby This is a CTF challenge called TinyVM. The author is very lazy, not wanting to write a description of the challenge, and the ...
SDCTF 2022 Write-Ups rbash-warmup JAIL - Easy Rbash Warmup Welcome to the restricted shell! Demonstrate RCE on this rbash setup by running the /flag binary executable, and you will be awarded wit...
Methodology Description and hints/try to determine topic file exiftool/metadata strings -t x -w Carving Scripts XOR Files Bit Extractor PIL Pixels WAV Bits Tools Sans ...
Methodology Usually need to start with reversing methodology Check protections checksec [binary] Test for overflows everywhere cyclic [num_bytes] && cy...
Methodology Description and hints/try to determine topic Surface-Level Analysis file/strings -t x -w can provide more clues Static Analysis Look at imports/exp...
Methodology Recon Initial Access Privilege Escalation Pivoting Execution Scripts Tools Practice CyberDefenders Links Team Europe A/D Tools Web Security Academy G...
Methodology Description and hints/try to determine topic Scripts RSA Padding Oracle Tools Sage Math aka CoCalc quipquip Old school crypto tool FactorDB FactorDB-CLI RSAT...
Methodology Description and hints/try to determine topic Source code/Path manipulation Input locations (HTTP headers, cookies, files, input fields, server logs) Server, application, and e...