- CTFtime: https://ctftime.org/event/2217/
- 445 solves / 105 points
Just cheat.
I solved all web and some misc challenges. This gist shows my solvers for two hard web challenges: quickstyle and biscuit-of-totality.
- CTFtime: https://ctftime.org/event/2102
- Official repository: https://github.com/uclaacm/lactf-archive/tree/main/2024
- Author: r2uwu2
I solved two web challenges: required notes and required notes revenge. Although the intened solution is XS-Leak, I found RCE solution even for the revenge challenge!
- CTFtime:
- An author solution for required notes:
- https://gist.github.com/Ze-Pacifist/9bcd1072a62bbc5850322878b21bc8c8
- It uses a leak technique described in https://infosec.zeyu2001.com/2023/from-xs-leaks-to-ss-leaks.
- CTFtime: https://ctftime.org/event/2165
- 10 solves / 334 points
- Author: strell
- Make a malicious profile:
- CTFtime: https://ctftime.org/event/2119
- 8 solves / 305 points
- CTFtime: https://ctftime.org/event/2375
- Repository: https://github.com/blairsec/challenges/tree/master/angstromctf/2024
I expect that the intended solution is to prepare a server that returns a crafted Content-Type header. However, I solved this challenge without preparing the server :)
🚨 I uploaded files to my repository: https://github.com/arkark/my-ctf-challenges/tree/main/challenges/202409_IERAE_CTF_2024/web/leakleakleak
- CTFtime: https://ctftime.org/event/2441/
You can download challenge files from: leakleakleak.tar.gz
OlderNewer