YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 5 min readBroncoCTF: Lovely LoginExecutive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login. The obvious attack surface — NoSQL operator injection on username/password — turned o00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 4 min readBroncoCTF : Spot the difference WriteupChallenge We're given two files, file1.txt and file2.txt, each containing what looks like a long, random blob of letters, digits, and symbols — one character per line. At a glance the two files look i00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 4 min readBroncoCTF : Unblur me WriteupChallenge A web page at https://broncoctf-unblur-me.chals.io/ presents a "Calculus Review" quiz: Solve 500 derivatives to unblur the image and unlock a secret. Progress: 0 / 500 A blurred image sits 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 5 min readBroncoCTF : The KeyMaster WriteupChallenge No file, no binary — just a URL: https://broncosec.com/BroncoCTF The flag format is given as bronco{XXXX...}. Nothing else. This is an OSINT / web-recon style challenge: the flag is broken 00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 7 min readBroncoCTF : Atomic Substitution Theory WriteupChallenge We're given secret.txt, a single line of comma-separated tuples wrapped in what looks like braces and underscores: (4, 17), (2, 16), (2, 15), (4, 9), { , (3, 2, 1), (5, 3), _ , (2, 17), ... 11A
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 2 min readBronoCTF : No Laughing MatterChallenge A single file, aha.txt, containing nothing but space-separated 8-letter "words" made up of only two characters: A and H. $ cat aha.txt AHHAAAHA AHHHAAHA AHHAHHHH AHHAHHHA AHHAAAHH AHHAHHHH A11J
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 4 min readBronoCTF : LEts a GO WriteupCategory: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip, a 63 KB archive. $ zipinfo lego_bricks_challenge.zip Archive: lego_bri00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 4 min readBroncoCTF : Super Secure ServerExecutive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's own JavaScript fetches the "secret" credentials from00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 5 min readBroncoCTF : Bundle WriteupSummary A .kra-adjacent artifact named Bundle_99 is handed off for analysis. It turns out to be a Krita resource bundle (.bundle) — a plain ZIP archive containing a brush preset (Brush 99.kpp). The .k00
YPYogeshwar Peelainexploitnotes.hashnode.dev·Jul 12 · 6 min readBroncoCTF : Magic Ways WriteupExecutive Summary challenge.png was a PNG file that had been deliberately mangled at the byte level so that neither the OS, exiftool, nor pngcheck would recognize it as a valid image. The fix required00
