ctfs.hashnode.devBits Krieg CTF: Cider Vault Solution & Linux Heap Exploitation GuideChallenge Description Welcome to the Storybook Workshop! In this post, we are going to break down Cider Vault, an incredibly well-designed CTF challenge that serves as a masterclass in modern Linux he9h ago·11 min read
ctfs.hashnode.devSolving LACTF Lazy Bigrams: Phonetic Bigram Substitution ChallengeDetailed Walkthrough The challenge provides us with a Python script, chall.py, and a ciphertext file, ct.txt. Our goal is to reverse the encryption process to recover the flag. Analyzing the Encryption Script We begin by examining the logic in chall....Feb 8·3 min read
ctfs.hashnode.devSolve LACTF Tic-Tac-No Challenge: OOB Write Exploit GuideChallenge Walkthrough 1. Introduction In this challenge, we are presented with a Tic-Tac-Toe game written in C. The game uses a "Minimax" algorithm, which is a mathematical way for a computer to play perfectly. Under normal circumstances, you can onl...Feb 8·3 min read
ctfs.hashnode.devCustom Packaging CTF Writeup: Decrypting the Custom KCF ContainerChallenge Description Category: ForensicsAuthor: qvipin Our threat intel team has been tracking KRAMPUS SYNDICATE for months now. Last week, we finally caught a break. We intercepted a file transfer between two of their operatives, some kind of encry...Jan 1·8 min read
ctfs.hashnode.devTrust Issues CTF Writeup: AWS IAM Privilege EscalationChallenge Description Category: MiscellaneousAuthor: qvipin KRAMPUS SYNDICATE managed to get one of their operatives hired as an external contractor at NPLD's cloud infrastructure team. They've been given minimal access, but NPLD's IAM policies are.....Jan 1·3 min read