YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 5 min readBroncoCTF : The KeyMaster WriteupChallenge No file, no binary — just a URL: https://broncosec.com/BroncoCTF The flag format is given as bronco{XXXX...}. Nothing else. This is an OSINT / web-recon style challenge: the flag is broken 00
YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 4 min readBronoCTF : LEts a GO WriteupCategory: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip, a 63 KB archive. $ zipinfo lego_bricks_challenge.zip Archive: lego_bri00
YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 5 min readBroncoCTF : Bundle WriteupSummary A .kra-adjacent artifact named Bundle_99 is handed off for analysis. It turns out to be a Krita resource bundle (.bundle) — a plain ZIP archive containing a brush preset (Brush 99.kpp). The .k00
YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 6 min readBroncoCTF : Magic Ways WriteupExecutive Summary challenge.png was a PNG file that had been deliberately mangled at the byte level so that neither the OS, exiftool, nor pngcheck would recognize it as a valid image. The fix required00
YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 5 min readBroncoCTF : Negative Bread WriteupChallenge We're given a single ELF binary, bank: $ file bank bank: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, not stripped Runni00
YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 7 min readBroncoCTF : Atomic Substitution Theory WriteupChallenge We're given secret.txt, a single line of comma-separated tuples wrapped in what looks like braces and underscores: (4, 17), (2, 16), (2, 15), (4, 9), { , (3, 2, 1), (5, 3), _ , (2, 17), ... 00
YPYogesh Peelainexploitnotes.hashnode.dev·6h ago · 7 min readBronocCTF : Proper Pwning WriteupCategory: Pwn / Binary Exploitation Difficulty: Medium Flag: bronco{1m_th3_b35t_PWN3r_1n_th3_wh0l3_w1d3_w0r1d} Challenge We're given proper.zip containing four files: $ unzip proper.zip Archive: prop00
YPYogesh Peelainexploitnotes.hashnode.dev·7h ago · 7 min readBronoCTF : Custom Cipher WriteupSummary pscheme.py implements a toy "encryption" scheme that encodes each 4-byte chunk of the flag as extra roots multiplied directly into a public polynomial. Because the polynomial multiplication is00
