CUHK CTF 2024 Writeup

Writeup

• Web Exploitation
  1. Pokemon
  2. Telepathy (Not fully solved)

Background

• Starts: 12 Oct. 2024, 09:00 HKT
• Ends: 13 Oct. 2024, 21:00 HKT

Categories:

• Web Exploitation
• Cryptography
• Binary Exploitation
• Reverse Engineering
• Forensics
• Miscellaneous

Overview

• Team: NuttyShell Red
• Team Solves: 22/40
• Individual Solves: 8/40
• Score: 4604
• Global Rank: 5/91
• Invited Team Division Rank: 4/8
• Overall Difficulty To Me: ★★★★★☆☆☆☆☆

What I’ve learned in this CTF

• Web Exploitation
  1. Pokemon - GraphQL injection and enumeration
  2. Telepathy (Not fully solved) - PostgreSQL SQL injection and filter bypass