neven@dimitri-dev:~$
cd ..

$cd ~/writeups/hacknite-2021

Hacknite 2.0

The second national CTF for Croatian high schools, run by CARNET's CERT.hr. Played for Elektrotehnička i prometna škola Osijek.

Event site

$ls ~/writeups/hacknite-202128 files

  1. pwn/Pwn, 2 files
    1. Secret Locationsecret-location.md#buffer-overflow #memory-safety #c2 min150 pts
    2. Trip Calculationtrip-calculation.md#c #source-review #logic2 min120 pts
  2. web/Web, 12 files
    1. e-Shop "Union"e-shop-union.md#sql-injection #union #password-hash1 min300 pts
    2. SELECT error FROM infoselect-error-from-info.md#blind-sql-injection #password-hash #automation2 min250 pts
    3. Find Your Sitefind-your-site.md#xss #cookie-theft #session2 min200 pts
    4. Usable Linksusable-links.md#csrf #access-control1 min150 pts
    5. Loading picture.phploading-picture-php.md#file-upload #rce #php2 min130 pts
    6. Authenticationauthentication.md#deserialization #php-object-injection #base642 min80 pts
    7. Linux ROT13linux-rot13.md#command-injection #rce #linux1 min80 pts
    8. Local Login Inclusionlocal-login-inclusion.md#lfi #path-traversal #apache2 min70 pts
    9. Searchingsearching.md#sql-injection #database2 min70 pts
    10. Hidden Admin Contenthidden-admin-content.md#cookies #access-control #devtools1 min50 pts
    11. (Un)predictable Databasesunpredictable-databases.md#idor #url-parameter1 min40 pts
    12. The Most Secure Password Checkthe-most-secure-password-check.md#client-side #devtools #javascript2 min40 pts
  3. rev/Reversing, 4 files
    1. j4v45CR1Pt 08fu5c4t0rjavascript-obfuscator.md#javascript #obfuscation #devtools2 min200 pts
    2. Maybe it is 42?maybe-it-is-42.md#reversing #ida #decompiler1 min100 pts
    3. Pythonpython.md#python #base32 #encoding1 min50 pts
    4. strcmp(), strlen(), strncmp()strcmp-strlen-strncmp.md#reversing #ida #strings1 min50 pts
  4. crypto/Crypto, 1 file
    1. Friday 13thfriday-13th.md#rot13 #caesar-cipher #known-plaintext2 min30 pts
  5. steganography/Steganography, 3 files
    1. Completely Normal Picturecompletely-normal-picture.md#png #low-contrast #image-editing2 min50 pts
    2. Hitchcock's Recordinghitchcocks-recording.md#audio #spectrogram #wav2 min40 pts
    3. Hidden Meaninghidden-meaning.md#jpeg #strings #file-contents2 min30 pts
  6. misc/Misc, 4 files
    1. Esoteraesotera.md#esoteric-languages #whitespace #brainfuck3 min60 pts
    2. Intruderintruder.md#regex #grep #text-search2 min50 pts
    3. Quick Responsequick-response.md#qr-code #image-editing2 min40 pts
    4. Rulesrules.md#rules #flag-format1 min10 pts
  7. osint/OSINT, 2 files
    1. Journeyjourney.md#exif #geolocation #google-maps1 min50 pts
    2. Loginlogin.md#default-credentials #routers #search1 min50 pts