KnightCTF 2023 Writeups

CTFtime event link: https://ctftime.org/event/1792/

Writeups

• Web/API:
  • GET Me
  • Knight Search
• Misc:
  • Dirt
  • Logger
• Cryptography:
  • Xorathrust
• Osint:
  • Flavour Enhancer (Unsolved)

Background

KnightCTF is an international CTF competition organized by Knight Squad Community. We started the trend to organize international CTF events in Bangladesh with KnightCTF-2022 and we are determined to continue this event every year. KnightCTF-2022 was the beginning of that journey and exactly after one year, here we go again!

• Start: 20 January 2023, 09:00PM Bangladesh Time
• End Date: 21 January 2023, 09:00PM Bangladesh Time

Categories:

• Hardware
• Forensics
• Reverse Engineering
• PWN
• Networking
• Cryptography
• Web/API
• Osint
• Basics

Overview

• Solved: 6
• Points: 325
• Rank: 378/848
• Overall Difficulty To Me: ★★★★★★☆☆☆☆

What I’ve learned in this CTF

• Web/API:
  1. Enumerating Hidden Parameter In An API Endpoint (GET Me)
  2. Remote Code Execution (RCE) Via Werkzeug Debug Console & Bypassing Console PIN Code, Path Traversal Filter (Knight Search)
• Misc:
  1. Unziping File & Reversing Strings (Dirt)
  2. Sorting HTTP Access Log By Time (Logger)
• Cryptography:
  1. Decrypting XOR’ed File(Xorathrust)
• Osint: Flavour Enhancer (Unsolved)