Bits Krieg CTF: Cider Vault Solution & Linux Heap Exploitation GuideChallenge Description Welcome to the Storybook Workshop! In this post, we are going to break down Cider Vault, an incredibly well-designed CTF challenge that serves as a masterclass in modern Linux heFeb 22 · 11 min readctfs.hashnode.dev
Solving LACTF Lazy Bigrams: Phonetic Bigram Substitution ChallengeDetailed Walkthrough The challenge provides us with a Python script, chall.py, and a ciphertext file, ct.txt. Our goal is to reverse the encryption process to recover the flag. Analyzing the Encryption Script We begin by examining the logic in chall....Feb 8 · 3 min readctfs.hashnode.dev
Solve LACTF Tic-Tac-No Challenge: OOB Write Exploit GuideChallenge Walkthrough 1. Introduction In this challenge, we are presented with a Tic-Tac-Toe game written in C. The game uses a "Minimax" algorithm, which is a mathematical way for a computer to play perfectly. Under normal circumstances, you can onl...Feb 8 · 3 min readctfs.hashnode.dev
Custom Packaging CTF Writeup: Decrypting the Custom KCF ContainerChallenge Description Category: ForensicsAuthor: qvipin Our threat intel team has been tracking KRAMPUS SYNDICATE for months now. Last week, we finally caught a break. We intercepted a file transfer between two of their operatives, some kind of encry...Jan 1 · 8 min readctfs.hashnode.dev
Trust Issues CTF Writeup: AWS IAM Privilege EscalationChallenge Description Category: MiscellaneousAuthor: qvipin KRAMPUS SYNDICATE managed to get one of their operatives hired as an external contractor at NPLD's cloud infrastructure team. They've been given minimal access, but NPLD's IAM policies are.....Jan 1 · 3 min readctfs.hashnode.dev