1337 Local CTF: Baby-AES — Known Plaintext → Tiny Keyspace
Recovering a 9-byte AES key by using the known flag format and a known plaintext/ciphertext pair.
1337 Local CTF: baby overflow — Integer Overflow
Using an 8-bit integer wraparound to satisfy a numeric check.
1337 Local CTF: BASIT — Apache Traversal → Encrypted ZIP → Nested Stego
Following a PCAP attack chain from Apache CVE-2021-41773 to an encrypted archive and hidden image payload.
1337 Local CTF: big brother — Reverse Engineering Hidden Session Logic
Recovering a hidden rev flag from the challenge binary and confirming submission.
1337 Local CTF: Encrypted Callback — TLS 1.3 Decryption → PowerShell Malware
Decrypting TLS 1.3 traffic with sslkeylog.log, unpacking PowerShell stages, and reversing exfiltrated telemetry.
1337 Local CTF: holy bytes hh — Timing Side Channel
Extracting a flag bit-by-bit from a deliberate timing leak in a Python loop.
1337 Local CTF: intro to zk — Broken Fiat-Shamir Binding
Forging a Sigma protocol proof because the verifier's challenge is constant and not bound to the commitment.
1337 Local CTF: July pool 2024 — Dangling Git Commits
Recovering a split flag from unreachable Git objects inside a piscine project archive.
1337 Local CTF: MOL TAXI — Phishing PCAP → XOR Malware Layers
Extracting an encrypted invoice from HTTP traffic and peeling XOR, Base64, zlib, and malware config layers.
1337 Local CTF: new intra — IDOR → Staff Login → Admin Page
Chaining a profile-update IDOR into staff authentication and retrieving the flag from the admin page.
CTF writeups and security research. New posts coming soon.
Music
No playing
0:00 0:00
28
3
81
26,137
0 days
0 days ago