KalmarCTF 2025 Writeup

CTFTime event link: https://ctftime.org/event/2599

Writeup

• web
  1. KalmarNotes
  2. G0tchaberg
  3. KalmarDSL

Background

• Starts: 07 March 2025, 17:00 UTC
• Ends: 09 March 2025, 17:00 UTC

Welcome to KalmarCTF 2025, brought to you by Kalmarunionen!

Categories:

• misc
• crypto
• web
• rev
• pwn

Overview

• Team: Black Bauhinia
• Team Solves: 13/28
• Individual Solves: 3/28
• Score: 2669
• Global Rank: 17/287
• Overall Difficulty To Me: ★★★★★☆☆☆☆☆

What I've learned in this CTF

• web
  1. KalmarNotes - Self-XSS to stored XSS via cache poisoning
  2. G0tchaberg - Leak Gotenberg processing files via race condition
  3. KalmarDSL - Structurizr DSL Remote Code Execution via workspace extension