🚨 I uploaded files to my repository: https://github.com/arkark/my-ctf-challenges/tree/main/challenges/202409_IERAE_CTF_2024/web/leakleakleak
- CTFtime: https://ctftime.org/event/2441/
You can download challenge files from: leakleakleak.tar.gz
- CTFtime: https://ctftime.org/event/2375
- Repository: https://github.com/blairsec/challenges/tree/master/angstromctf/2024
I expect that the intended solution is to prepare a server that returns a crafted Content-Type header. However, I solved this challenge without preparing the server :)
- CTFtime: https://ctftime.org/event/2119
- 8 solves / 305 points
- CTFtime: https://ctftime.org/event/2165
- 10 solves / 334 points
- Author: strell
- Make a malicious profile:
I solved two web challenges: required notes and required notes revenge. Although the intened solution is XS-Leak, I found RCE solution even for the revenge challenge!
- CTFtime:
- An author solution for required notes:
- https://gist.github.com/Ze-Pacifist/9bcd1072a62bbc5850322878b21bc8c8
- It uses a leak technique described in https://infosec.zeyu2001.com/2023/from-xs-leaks-to-ss-leaks.
I solved all web and some misc challenges. This gist shows my solvers for two hard web challenges: quickstyle and biscuit-of-totality.
- CTFtime: https://ctftime.org/event/2102
- Official repository: https://github.com/uclaacm/lactf-archive/tree/main/2024
- Author: r2uwu2
- CTFtime: https://ctftime.org/event/2217/
- 445 solves / 105 points
Just cheat.
- CTFtime: https://ctftime.org/event/1953
- 47 solves / 96 pts
<body>- 5 solves / 365 pts
- Author: n4o847
- CTFtime: https://ctftime.org/event/2013/
My solution:
$ nc 34.84.217.62 30002- CTFtime: https://ctftime.org/event/2056/
- 10 solves / 285 solves
Who will do this?
NewerOlder