ASIS CTF Quals 2025 Writeup

CTFTime event link: https://ctftime.org/event/2612

Writeup

• Web
  1. ScrapScrap I Revenge!
  2. ScrapScrap II

Background

• Starts: 06 Sept. 2025, 14:00 UTC
• Ends: 07 Sept. 2025, 14:00 UTC

Win a place in the top three of the ASIS CTF qualifiers and secure your fully-funded invitation to the Iran Tech Olympics https://ctf.olympics.tech onsite finals in October!

All travel and accommodation costs are covered.

Categories:

• Web
• Pwn
• Reverse
• Crypto
• Welcome

Overview

• Team: ARESx
• Team Solves: 5/24
• Individual Solves: 2/24
• Score: 378
• Global Rank: 46/368
• Overall Difficulty To Me: ★★★★★★★★☆☆

What I've learned in this CTF

• Web
  1. ScrapScrap I Revenge! - Reflected XSS by using textContent and HTML elements as the delimiter and SQL injection bypass
  2. ScrapScrap II - SQL injection bypass