Writeups by Solution
This document organizes CTF writeups by solution type and technique rather than by CTF event. Use this as a reference when looking for specific exploitation techniques or vulnerability types.
Table of contents:
AI
Crypto
- RSA:
- Small n
- Small e
- Factorable n
- Small d
- Same m and n, different e
- N and c has common factors
- Known n, p-q
- Known n, e, phi^{-1}*d mod n
- Known n, e, d
- Known n, pow(p, -q, q), pow(q, -p, p)
- Solving p, q for diffent known values
- Discrete logarithm:
- AES:
- DES:
- Double block cipher:
- Caesar cipher:
- Polynomial:
- Linear congruential generator
- ECDSA:
- Python random number generator
- C random number generator
- Approximate Common Divisor
- Modular Inverse Hidden Number Problem
- Differential Cryptanalysis
Forensics
- Wireshark:
- Microsoft Word:
- Editor history:
- Disk image:
- Password protected files:
- Audio:
- Shell:
- Windows:
- Linux:
- TightVNC:
Misc
- Image steganography:
- Text steganography:
- Audio steganography:
- Representations:
- Font:
- Side channel:
- PDF:
Pwn
- Stack buffer overflow:
- Format string:
- Out of bounds read/write:
- Arbitrary file access:
- Integer overflow:
- Ruby jail:
- JavaScript jail:
- Python jail:
- Shell jail:
- Perl jail:
- Environment variable:
Reverse
- Fuzzing:
- JavaScript:
- Android:
- Memory dump:
- Validation bypass:
- PyInstaller:
- BPF:
- Side channel:
Web
- XSS:
- GraphQL:
- CURL:
- PHP:
- Flask:
- SQL injection:
- Json query injection:
- MongoDB:
- Information leak:
- Next.js:
- YAML:
- Race condition:
- Path traversal:
- bcrypt:
- DNS:
- Side channel: