m0lw9re / my-ctf-challenges

🏴 🏴 🏴

My CTF Challenges

HITCON CTF 2022

goto: writeup

Challenge	Category	Keywords
🎲 RCE	web	Baby
💣 Self Destruct Message	web	XSS
🎧 S0undCl0ud	web
📃 web2pdf	web	0-day
V O I D	misc	PyJail
🥒 Picklection	misc	Pickle

TSJ CTF 2022

Name	Tags	Keywords
Genie	Web, Crypto	Julia deserialization, Bit flipping
Avatar	Web	Redis SSRF, CRLF injection, POP chain
Welcome to TSJ CTF	Web, Misc, CSC	.DS_Store, Guessing

AIS3 EOF CTF

2021 Quals

Name	Category	Keywords (intended solution)	Estimated Difficulty
SSRF challenge or not?	Web	file://, signed pickle cookie	⭐
Happy Metaverse Year	Web	Union-based SQLi	⭐⭐
babyphp	Web	.htaccess, chain php://filters	⭐⭐⭐
GistMD	Web	jsonp, DOM clobbering	⭐⭐⭐⭐
Imgura album	Web	Path traversal, PHP session , deserialize	⭐⭐⭐⭐
PM	Web	FPM SSRF	⭐
LeetCall	Misc	Python, Programming	⭐⭐⭐
babyheap	Misc	argument injection (wget, zip)	⭐⭐⭐

2020 Quals

Name	Category	Keywords
WTF	Web	php wrapper, file command
CYBERPUNK 1977	Web	SQL injection, quine, python format string
CTF Note	Web	prototype pollution, DOM clobbering, RPO
3DUSH3LL	Misc	Python Sandbox

2020 Final

All of my challenges in this CTF are related to Python XD

Name	Category	Keywords	Estimated Difficulty
Pikora	Misc	Pickle, PPC	Hard
Cat Translator	Misc	Troll, Python	Easy
Cat Slayer	Reverse	Python bytecode	Medium ~ Hard

AIS3 Pre-Exam

2021

Web | Reverse | Misc

Name	Category	Keywords	Estimated Difficulty
🐰 Peekora 🥒	Reverse	Pickle Bytecode	Easy
ⲩⲉⲧ ⲁⲛⲟⲧⲏⲉꞅ 𝓵ⲟ𝓰ⲓⲛ ⲣⲁ𝓰ⲉ	Web	JSON injection	Baby
【5/22 重要公告】	Web	LFI, SQL injection, Command injection	Easy
XSS Me	Web	XSS with length limit	Easy ~ Medium
Cat Slayerᴵⁿᵛᵉʳˢᵉ	Web	Java Deserialization, Reflection	Easy ~ Medium
Cat Slayer | Cloud Edition	Misc	Pickle, ECB Cut&Paste	Medium
Cat Slayer | Online Edition	Misc	Game, Python Sandbox	Easy