San Diego CTF 2024 Writeup

CTFTime event link: https://ctftime.org/event/2325

Writeup

• Misc:
  1. impossible-golf
• Web:
  1. open-source
  2. calculator
  3. SNOWfall

Background

• Starts: 10 May 2024, 23:59 UTC
• Ends: 12 May 2024, 23:59 UTC

San Diego CTF (SDCTF) is an annual Capture the Flag competition hosted by undergraduates at the University of California, San Diego (UCSD). Challenges vary across the disciplines of Open Source Intelligence, Cryptography, Web Hacking, Reverse Engineering, Binary Exploitation, Forensic Analysis, and others!

Categories:

• Misc
• Crypto
• Pwn
• Web
• Reverse
• Forensics

Overview

• Team: ARESx
• Team Solves: 4/29
• Individual Solves: 3/29
• Score: 550
• Global Rank: 60/679
• Overall Difficulty To Me: ★★★★★★★☆☆☆

What I’ve learned in this CTF

• Misc:
  1. impossible-golf (WebSocket)
• Web:
  1. open-source (Deobfuscate JavaScript code)
  2. calculator (JSON parsing confusion)
  3. SNOWfall (Server-Side Prototype Pollution)