The EKOParty security conference ran a pre-ctf competition last week for a ticket to the con and some nifty swag. I didn't have time to look at many but I tried out a couple of the pwnables. I connected to Pwn100 ( Smashing the stack for fun and profit ) and [...]

Navigating to the web 200 challenge we are presented with a quirky little web app that simulates grass growing. I clicked grow a good number of times for funsies but didn't really see much useful as a result. My next step was to see if any of the input boxes appeared [...]

This was the first challenge I decided to take a crack at for this year's CSAW CTF. After an initial glance in IDA Pro, it appears this challenge is pretty straight forward. It appears this challenge contains a classic buffer overflow. The only noticeable difference is that [...]

This past weekend Japan's University of Electro-Communications hosted the 2015 MMACTF. I only had a few spare cycles this weekend, so I used that time to look at an easy one called RPS ( rock paper scissors ). The challenge consists of a basic server application that iteratively plays rock paper swissors with a [...]

  This past weekend I played in the Defcon Qualification CTF and decided to do a quick write-up on one of the challenges I spent a fair amount of time solving. The challenge was named twentyfiveseventy and was located in the PWNABLE category, which typically means it contains some sort of vulnerability that can be [...]

The challenge description for this one tells us that there is a server running at the address that will load a given regex and only return the flag if the string supplied does not match the loaded regex. The regex file starts by specifying that the string must be composed of only the letters in [...]

    This challenge provided you with a file that appeared to be a PNG that had been modified or corrupted by some means. Opening the file in a image viewer yielded nothing as the format had obviously been rendered unrecognizable. My intuition was to try and repair the structure of the PNG using [...]

  At first glance the string appeared to be some kind of encoding, but what encoding only uses 5 characters. After further inspection, I recognized the characters as the ones that are commonly used for movement in computer games. The only key I wasn't sure about was the 'e' key. I googled [...]