Securinets CTF Quals 2023 Writeup

CTFTime event link: https://ctftime.org/event/1874

Writeups

• Web Exploitation:
  1. 0 CSP

Background

• Starts: 6 August 2023, 18:00 UTC
• Ends: 7 August 2023, 18:00 UTC

CTF Securinets Quals 2023 is an on-line jeopardy style CTF organized by Securinets Club.

The CTF starts 18:00 UTC (19:00 in Tunisia).

Only 15 teams will qualify to the final CTF + top 3 Tunisians/Algerians Teams.

Categories:

• Web Exploitation
• Digital Forensics
• Reverse Engineering
• Miscellaneous
• Cryptography
• Binary Exploitation

Overview

• Team: ARESx
• Team Solves: 10/22
• Individual Solves: 0/22
• Score: 3201
• Rank: 8/114
• Overall Difficulty To Me: ★★★★★★★★★★

What I’ve learned in this CTF

• Web Exploitation:
  1. Exploiting web cache poisoning in JavaScript’s Service Worker to deliver XSS payload (0 CSP)