NahamCon CTF 2024 Writeup

CTFTime event link: https://ctftime.org/event/2364

Writeup

• Web
  1. Hacker Web Store
  2. Thomas DEVerson
• Sponsorship
  1. WP Elevator

Background

• Starts: 23 May 2024, 20:00 UTC
• Ends: 25 May 2024, 20:00 UTC

NahamCon CTF returns for its FIFTH year! From the developers of VirSecCon, H@cktivityCon, BsidesBOS, GRIMMCon CTF, and NahamCon years past… join the mission and join NahamCon CTF 2024!

Categories:

• Warmups
• Web
• Binary Exploitation
• Reverse Engineering
• Cryptography
• Forensics
• Mobile
• Malware
• Miscellaneous
• Scripting
• Challenge Group
• Sponsorship
• Machine Learning

Overview

• Team: ARESx
• Team Solves: 56/64
• Individual Solves: 5/64
• Score: 16183
• Global Rank: 10/3859
• Overall Difficulty To Me: ★★★★☆☆☆☆☆☆

What I’ve learned in this CTF

• Web
  1. Hacker Web Store (SQL injection)
  2. Thomas DEVerson (Forge Flask session cookie)
• Sponsorship
  1. WP Elevator (WordPress plugin source code audit)