DamCTF 2023 Writeups

CTFTime event link: https://ctftime.org/event/1872

Writeups

• web:
  1. tcl-tac-toe
  2. url-stored-notes
• misc:
  1. de-compressed

Background

• Starts: 08 April 2023, 00:00 UTC
• Ends: 09 April 2023, 00:00 UTC

DamCTF is a Capture the Flag competition hosted by the Oregon State University Security Club (OSUSEC). The competition is designed for college teams, but all are welcome to play.

Categories:

• binary
• crypto
• misc
• web

Overview

• Solved: 5/19
• Score: 1347
• Rank: 59/451
• Overall Difficulty To Me: ★★★★★★★★★☆

What I’ve learned in this CTF

• web:
  1. Exploiting Logic Bug (tcl-tac-toe)
  2. PyScript XSS (url-stored-notes)
• misc:
  1. Extract Hidden File In PKZip & Unicode Steganography With Zero-Width Characters (de-compressed)