I participated in the picoCTF 2023 competition as an individual competing in the Global category, organised by Carnegie Mellon University, which ran from Mar 15 2023 to Mar 29 2023.
This is a write up of the challenges solved during the event.
This event write up is a work in progress.
As time permits I'll be adding further individual challenge write ups for all those marked as (Solved), based on my notes taken during the event. Additionally there may be the odd challenge that I failed to solve but want to document my progress, marked (Unsolved - Progress Writeup).
Binary Exploitation (6 solutions)
- babygame01 (Solved)
- two-sum (Solved)
- babygame02 (Solved)
- hijacking (Solved)
- tic-tac (Solved)
- VNE (Solved)
- Horetrack (Unsolved - Progress Writeup)
Cryptography (2 solutions)
- HideToSee (Unsolved)
- ReadMyCert (Solved)
- rotation (Solved)
- PowerAnalysis: Warmup (Unsolved)
- PowerAnalysis: Part 1 (Unsolved)
- SRA (Unsolved)
- PowerAnalysis: Part 2 (Unsolved)
Forensics (5 solutions)
- hideme (Solved)
- PcapPoisoning (Solved)
- who is it (Solved)
- FindAndOpen (Solved)
- MSB (Solved)
- Invisible WORDs (Unsolved)
- UnforgottenBits (Unsolved)
General Skills (7 solutions)
- chrono (Solved)
- money-ware (Solved)
- Permissions (Solved)
- repetitions (Solved)
- Rules 2023 (Solved)
- useless (Solved)
- Special (Solved)
- Specialer (Unsolved)
Reverse Engineering (3 solutions)
- Ready Gladiator 0 (Solved)
- Reverse (Solved)
- Safe Opener 2 (Solved)
- timer (Solved)
- Virtual Machine 0 (Unsolved)
- No way out (Unsolved)
- Ready Gladiator 1 (Solved)
- Virtual Machine 1 (Unsolved)
- Ready Gladiator 2 (Solved)
Web Exploitation (2 solutions)
- findme (Solved)
- MatchTheRegex (Solved)
- SOAP (Unsolved)
- More SQLi (Unsolved)
- Java Code Analysis!?! (Unsolved)
- cancri-sp (Unsolved)
- msfroggenerator2 (Unsolved)
Full solutions to the challenges are provided in the write ups, however the actual flag values are witheld.
React
Typescript
Django
Laravel
Facebook
Microsoft
Google
Alibaba
D3
Tencent