Incognito 4.0 Writeups

CTFtime event link: https://ctftime.org/event/1880

Writeups

• Web:
  • get flag 1
  • get flag 2
  • massive (Unsolved)
• Rev:
  • Meow
• crypto:
  • Ancient
• pyjail:
  • TheOnlyJail
• pwn:
  • babyFlow

Background

Incognito 4.0 is a CTF competition being held in the Equinox-Annual Techno-Cultural Fest of IIIT Lucknow. It is open for participants all around the globe to take part in and win exciting prizes.

• Start: 17 Feb. 2023, 20:00 HKT
• End: 18 Feb. 2023, 20:00 HKT

Categories:

• misc
• stegno
• pwn
• OSINT
• Web
• Rev
• crypto
• sanity
• pyjail

Overview

• Solved: 8
• Points: 1772
• Rank: 162/525
• Overall Difficulty To Me: ★★★★★☆☆☆☆☆

What I’ve learned in this CTF

• Web:
  1. Exploiting SSRF (Server-Side Request Forgery) & Bypassing Filters (get flag 1)
  2. Exploiting SSRF (Server-Side Request Forgery) & Bypassing Filters Via IPv6 IP Address (get flag 2)
  3. massive (Unsolved)
• Rev:
  1. Using xxd To View Hex Value (Meow)
• crypto:
  1. Fixing PNG Magic Header & Cistercian Number System (Ancient)
• pyjail:
  1. Python Jailbreak Via Importing OS Library (TheOnlyJail)
• pwn:
  1. Basic Stack Buffer Overflow Via gets() Function (babyFlow)