picoCTF 2018 Writeup
This CTF was done with @pauxy and @StopDuckRoll
Special thanks to @LFlare for helping out with a few challenges!
Forensics writeups
Although it states that I may do some of the writeups for the forensics challenges, it's very unlikely it will ever be completed, mostly because those challenges were not solved by me, and I'm lazy. Pull requests are welcomed!
Content Page
Binary Exploitation
| Challenges | Points | Status |
|---|---|---|
| buffer overflow 0 | 150 | Solved |
| buffer overflow 1 | 200 | Solved |
| leak-me | 200 | Solved |
| shellcode | 200 | Solved |
| buffer overflow 2 | 250 | Solved |
| got-2-learn-libc | 250 | Solved |
| echooo | 300 | Solved |
| authenticate | 350 | Solved |
| got-shell? | 350 | Solved |
| rop chain | 350 | Solved |
| buffer overflow 3 | 450 | Unsolved |
| echo back | 500 | Unsolved |
| are you root? | 550 | Unsolved |
| gps | 550 | Unsolved |
| can-you-gets-me | 650 | Solved |
Cryptography
| Challenges | Points | Status |
|---|---|---|
| Crypto Warmup 1 | 75 | Solved |
| Crypto Warmup 2 | 75 | Solved |
| HEEEEEEERE'S Johnny! | 100 | Solved |
| caesar cipher 1 | 150 | Solved |
| hertz | 150 | Solved |
| blaise's cipher | 200 | Solved |
| hertz 2 | 200 | Solved |
| Safe RSA | 250 | Solved |
| caesar cipher 2 | 250 | Solved |
| rsa-madlibs | 250 | Solved |
| SpyFi | 300 | Unsolved |
| Super Safe RSA | 350 | Solved |
| Super Safe RSA 2 | 425 | Solved |
| Magic Padding Oracle | 450 | Unsolved |
| Super Safe RSA 3 | 600 | Solved |
| James Brahm Returns | 700 | Unsolved |
Forensics
| Challenges | Points | Status |
|---|---|---|
| Forensics Warmup 1 | 50 | Solved |
| Forensics Warmup 2 | 50 | Solved |
| Desrouleaux | 150 | Solved |
| Reading Between the Eyes | 150 | Solved |
| Recovering From the Snap | 150 | Solved |
| admin panel | 150 | Solved |
| hex editor | 150 | Solved |
| Truly an Artist | 200 | Solved |
| now you don't | 200 | Solved |
| Ext Super Magic | 250 | Unsolved |
| Lying Out | 250 | Solved |
| What's My Name? | 250 | Solved |
| core | 350 | Unsolved |
| Malware Shops | 400 | Unsolved |
| LoadSomeBits | 550 | Solved |
General Skills
| Challenges | Points | Status |
|---|---|---|
| General Skills 1 | 50 | Solved |
| General Skills 2 | 50 | Solved |
| General Skills 3 | 50 | Solved |
| Resources | 50 | Solved |
| grep 1 | 75 | Solved |
| net cat | 75 | Solved |
| strings | 100 | Solved |
| pipe | 110 | Solved |
| grep 2 | 125 | Solved |
| Aca-Shell-A | 150 | Solved |
| environ | 150 | Solved |
| ssh-keyz | 150 | Solved |
| what base is this? | 200 | Solved |
| you can't see me | 200 | Solved |
| absolutely relative | 200 | Solved |
| in out error | 275 | Solved |
| learn gdb | 300 | Solved |
| roulette | 350 | Solved |
| store | 400 | Solved |
| script me | 500 | Solved (@plusline) |
| Dog or Frog | 900 | Unsolved |
Reversing
| Challenges | Points | Status |
|---|---|---|
| Reversing Warmup 1 | 50 | Solved |
| Reversing Warmup 2 | 50 | Solved |
| assembly-0 | 150 | Solved |
| assembly-1 | 200 | Solved |
| be-quick-or-be-dead-1 | 200 | Solved |
| quackme | 200 | Solved |
| assembly-2 | 250 | Solved |
| be-quick-or-be-dead-2 | 275 | Solved |
| be-quick-or-be-dead-3 | 350 | Solved |
| quackme up | 350 | Unsolved |
| Radix's Terminal | 400 | Solved |
| assembly-3 | 400 | Solved |
| keygen-me-1 | 400 | Unsolved |
| assembly-4 | 550 | Solved |
| special-pw | 600 | Unsolved |
Web Exploitation
| Challenges | Points | Status |
|---|---|---|
| Inspect Me | 125 | Solved |
| Client Side is Still Bad | 150 | Solved |
| Logon | 150 | Solved |
| Irish Name Repo | 200 | Solved |
| Mr. Robots | 200 | Solved |
| No Login | 200 | Solved |
| Secret Agent | 200 | Solved |
| Buttons | 250 | Solved |
| The Vault | 250 | Solved |
| Artisinal Handcrafted HTTP 3 | 300 | Solved |
| Flaskcards | 350 | Solved |
| fancy-alive-monitoring | 400 | Solved |
| Secure Logon | 500 | Unsolved |
| Flaskcards Skeleton Key | 600 | Unsolved |
| Help Me Reset 2 | 600 | Solved |
| A Simple Question | 650 | Solved |
| LambDash 3 | 800 | Unsolved |