ImaginaryCTF 2024 Writeup

CTFTime event link: https://ctftime.org/event/2396

Writeup

• Web
  1. crystals
  2. The Amazing Race
  3. readme2
  4. Pwning en Logique

Background

• Starts: 19 July 2024, 19:00 UTC
• Ends: 21 July 2024, 19:00 UTC

ImaginaryCTF 2024 is a cybersecurity CTF competition run by ImaginaryCTF with a variety of challenges for all skill levels, running from July 19 to July 21. Teams will be challenged to discover vulnerabilities in websites, crack codes, and recover information through challenges in cryptography, binary exploitation, web exploitation, forensics, reversing, and more. We hope that you will learn something new from our challenges!

Categories:

• Misc
• Web
• Forensics
• Crypto
• Reversing
• Pwn

Overview

• Team: ARESx
• Team Solves: 21/62
• Individual Solves: 9/62
• Score: 3381
• Global Rank: 58/1457
• Overall Difficulty To Me: ★★★★☆☆☆☆☆☆

What I’ve learned in this CTF

• Web
  1. crystals - Information disclosure in WEBrick
  2. The Amazing Race - Limit overrun race condition (TOCTOU)
  3. readme2 - Bypassing request URL filter via relative URL
  4. Pwning en Logique - Format string vulnerability in Prolog