Cyber Apocalypse 2023 Writeups
CTFtime event link: https://ctftime.org/event/1889
Writeups
- Web:
- Pwn:
- Misc:
- Reversing:
Background
- Starts: 18 March 2023, 21:00 HKT
- Ends: 23 March 2023, 20:59 HKT
Cyber Apocalypse is back!
Ready for a mission through space and time? This is your chance to join the biggest hacking competition of the year, powered by Hack The Box.
66 Million Years Ago… All started million years ago in a distant plannet, home to a parasitic alien species. Their plannet was threatened by a black hole and were searching solutions to survive. Therefore the aliens sent out organized missions, containing their offspring that would travel in space until hitting a planet suitable for them. Once they land on one, they would drill underground and hibernate until they were awakened. One of these vessels hit and established itself on Earth. However the hit was so massive it caused an extinction event that wiped out the dinosaurs.
Thousands of Years Ago… In one of those missions, In 3000 B.C., a spaceship crashed into Earth. The surviving crew was outnumbered and defeated by the tribes of ancient Egypt. Only one alien member managed to ran away wcith a very powerful treasure. This treasure is holding the power to awaken their kind, and infinite capabilities to anyone holding it. Despite that, the alien never made it to the spaceship and died in the desert. Generations later, the son of a Pharaoh stumbles on a strange skeleton, holding on to a piece of alien technology. He found a way to harness some of the immense power of this relic. He grew mad with power, oppressed his people and conquered neighboring nations. The people detested their leader, and when he died, he was buried along with the artifact in an underground city and was never spoken of again.
In the Distant Future… The Intergalactic Ministry of Spies has captured and decoded communications channels hinting that the aliens have already made it again to Earth and are trying to find information regarding the relic. The ministry contacted Pandora, a famous archaeologist hacker, to help them get to the powerful artifact before the aliens. She will have to race against time and navigate treacherous ancient tombs and underground cities to locate the relic. She will face rival treasure hunters and possible lifeforms of unknown origin. Will she be the first to find the artifact and save humanity?
Join, compete, meet, and learn from the best hackers in the world. Prizes for a total worth value of $50,000 are waiting for the top teams!
Categories:
- Warmups
- Pwn
- Web
- Blockchain
- Hardware
- Reversing
- ML
- Misc
- Forensics
- Crypto
Overview
- Team: BlackOps
- Team Member: hewozuoai, siunam
- Team Solved: 30/74
- My Solved: 12/74
- Points: 8725
- Rank: 423/6482
- Overall Difficulty To Me: ★★★★★★★★☆☆
What I’ve learned in this CTF
- Web:
- Viewing Source Page (Trapped Source)
- OS Command Injection (Gunhead)
- Authentication Bypass Via SQL Injection (Drobots)
- Leveraging GraphQL To Update Arbitrary User’s Password (Passman)
- Exploiting Error-Based/Time-Based SQL Injection (Orbital)
- JWT Header’s
"alg": "NONE"
Authentication Bypass & RCE Via JsRender SSTI (Didactic Octo Paddles) - SpyBug (Unsolved)
- Pwn:
- How To Use
nc
(NetCat) (Initialise Connection) - Basic Binary Exploitation Concept (Questionnaire)
- Basic Stack Buffer Overflow (Getting Started)
- How To Use
- Misc:
- Writing A Python Script To Send HTTP Request (Persistence)
- RBash escape (Restricted)
- Insecure Deserialization In Python’s YAML Library (Hijack)
- Reversing:
- Listing Strings In A File Via
strings
(Needle in a Haystack) - Basic Reverse Engineering (Hunting License)
- Listing Strings In A File Via