PlaidCTF 2023 Writeups

CTFTime event link: https://ctftime.org/event/1770

Writeups

• web:
  1. Davy Jones’ Putlocker: Dubs
  2. Davy Jones’ Putlocker: Subs (Unsolved)
• misc:
  1. Terrific Trigonometry Tutor: TTT (Unsolved)

Background

• Starts: 14 April 2023, 21:00 UTC
• Ends: 16 April 2023, 21:00 UTC

The Plaid Flag is the 2023 edition of PlaidCTF, an annual capture the flag competition run by PPP.

Categories:

• web
• rev
• misc
• crypto
• pwn

Overview

• Team: JHDiscord
• Team Member: @siunam, @fire, @sobek, @7777777, @AlwaysBeNoobing, @gls, @molten, @n00b_4bh1n4v, @oldschool125, @tangled, @WhoL3tTh3D0gsOut..?, @Pho3nix
• Team Solves: 3/22
• Individual Solves: 1/22
• Score: 451
• Rank: 67/618
• Overall Difficulty To Me: ★★★★★★★★★★

What I’ve learned in this CTF

• web:
  1. Accessing High Privilege GraphQL Query Via Stored XSS (Davy Jones’ Putlocker: Dubs)
  2. Davy Jones’ Putlocker: Subs (Unsolved)
• misc:
  1. Terrific Trigonometry Tutor: TTT (Unsolved)