neven@dimitri-dev:~$
cd ..

$cd ~/writeups/hackultet-2026

Hackultet 2026

The third national CTF for university students, run by CERT.hr, CARNET and FER.

Certificate (PDF)Event site

$ls ~/writeups/hackultet-202633 files

  1. pwn/Pwn, 5 files
    1. Hip Hip Hurahip-hip-hura.md#use-after-free #tcache-poisoning #rop5 min
    2. Processingprocessing.md#stack-canary #fork #rop4 min
    3. Read Me If You Canread-me-if-you-can.md#proc-filesystem #memory-disclosure #deleted-file2 min
    4. Story Timestory-time.md#buffer-overflow #fd-redirection #lfi4 min
    5. You Got Thisyou-got-this.md#uninitialized-variable #got-overwrite #scanf-quirk4 min
  2. web/Web, 9 files
    1. Avatar Appavatar-app.md#dockerfile #misconfiguration #enumeration2 min
    2. crash-appcrash-app.md#xss #encoding-bypass #cache-poisoning5 min
    3. InvoiceGen Ultra Proinvoicegen-ultra-pro.md#ssrf #nosql-injection #html-injection4 min
    4. Name Alogebraname-alogebra.md#command-injection #shell-quoting #php2 min
    5. Note Vaultnote-vault.md#css-injection #csp-bypass #exfiltration2 min
    6. Secure File Storagesecure-file-storage.md#crlf-injection #request-smuggling #path-traversal4 min
    7. UniChronunichron.md#jwt #bcrypt-truncation #uuid16 min
    8. Uvod u Web Sigurnost (Introduction to Web Security)uvod-u-web-sigurnost.md#boolean-oracle #data-leak-protection-bypass2 min
    9. we-come-in-peacewe-come-in-peace.md#vm-escape #template-injection #javascript3 min
  3. rev/Reversing, 7 files
    1. Code Jumblercode-jumbler.md#custom-format #lcg #fisher-yates3 min
    2. Encryption Without Keyencryption-without-key.md#substitution-cipher #byte-frequency #prng2 min
    3. its-prime-timeits-prime-time.md#anti-debugging #code-generation #custom-cipher3 min
    4. Move Itmove-it.md#movfuscator #obfuscation #brute-force2 min
    5. QR is Lifeqr-is-life.md#game-of-life #qr-code #meet-in-the-middle3 min
    6. WASM, Rocket Navigationwasm.md#webassembly #meet-in-the-middle #finite-field3 min
    7. Waste of Timewaste-of-time.md#simulation #anti-debugging #red-herring3 min
  4. crypto/Crypto, 10 files
    1. Diskretna Enkripcija (Discreet Encryption)diskretna-enkripcija.md#discrete-log #pohlig-hellman #baby-step-giant-step4 min
    2. Hash Me If You Canhash-me-if-you-can.md#md5-collision #postscript #self-referential-files4 min
    3. It's RSA Timeits-rsa-time.md#rsa #bit-oracle #bleichenbacher5 min
    4. Najljepše Latice (Most Beautiful Petals)najljepse-latice.md#ecdsa #biased-nonce #lattice-reduction4 min
    5. Safe Encryptionsafe-encryption.md#rsa #wiener-attack #multiplicative-homomorphism2 min
    6. Secret Servicesecret-service.md#padding-oracle #aes-cbc #pkcs73 min
    7. Slani Kreker (Salty Cracker)slani-kreker.md#pbkdf2 #meet-in-the-middle #aes-ecb5 min
    8. Space Cardsspace-cards.md#prng-prediction #permutation-recovery #lcg5 min
    9. Spot the Differencespot-the-difference.md#differential-cryptanalysis #sbox #z33 min
    10. Three Ticketsthree-tickets.md#ecdsa #hidden-number-problem #lattice-reduction3 min
  5. misc/Misc, 2 files
    1. C2c2.md#dfir #kape #timeline-analysis3 min
    2. Povratak Nemoguće Jednadžbe (Return of the Impossible Equation)povratak-nemoguce-jednadzbe.md#python-internals #sandbox-escape #operator-overloading3 min