NahamCon CTF 2025 Writeup

CTFTime event link: https://ctftime.org/event/2782

Writeup

• Web
  1. Talk Tuah

Background

• Starts: 23 May 2025, 19:00 UTC
• Ends: 25 May 2025, 19:00 UTC

Categories:

• Warmups
• Web
• Binary Exploitation
• Reverse Engineering
• Cryptography
• Forensics
• DevOps
• Malware
• Miscellaneous
• Networking
• OSINT

Overview

• Team: ARESx
• Team Solves: 47/55
• Individual Solves: 2/55
• Score: 10966
• Global Rank: 19/2946
• Overall Difficulty To Me: ★★★★☆☆☆☆☆☆

What you'll learn in this CTF

• Web
  1. Talk Tuah - Arbitrary File Write via race condition and Arbitrary File Write to RCE via hijacking Python importing module