corCTF 2024 Writeup

CTFTime event link: https://ctftime.org/event/2282

Writeup

• web
  1. rock-paper-scissors
  2. erm

Background

• Starts: 27 July 2024, 00:00 UTC
• Ends: 29 July 2024, 00:00 UTC

Play corCTF 2024, a cybersecurity competition by the Crusaders of Rust! Solve binary exploitation, cryptography, forensics, reversing, and web challenges. Join our disCoRd server!

Categories:

• crypto
• forensics
• misc
• pwn
• rev
• web

Overview

• Team: ARESx
• Team Solves: 7/30
• Individual Solves: 0/30
• Score: 664
• Global Rank: 67/641
• Overall Difficulty To Me: ★★★★★★★★★☆

What I’ve learned in this CTF

• web
  1. rock-paper-scissors - Missing type validation
  2. erm - Sequelize nested eager loading lead to information disclosure