CTF (Capture The Flag) wrteups

This repository contains writeups of some of the chalenges I have solved during various CTFs I have participated in. Every writeup contains a challenge description, my solution to the challenge and a flag.

Stats

Full stats: https://ctftime.org/team/16701 (Stack)

CTF (Capture The Flag) writeups

• 2024 Writeups
• 2022 Writeups
• 2020 Writeups
• 2019 Writeups
• 2018 Writeups
• 2017 Writeups
• 2016 Writeups
• 2015 Writeups
• Stats

2024

IrisCTF 2024

What's My Password?, Web 50

https://github.com/bl4de/ctf/blob/master/2024/IrisCTF_2024/whats-my-password/whats_my_password_solution.md

2022

SquareCTF 2022

EZ Pwn 1, Pwn 50

https://github.com/bl4de/ctf/blob/master/2022/SquareCTF_2022/ezpwn1_writeup.md

2020

Midnightsun CTF 2020

Admpanel, Pwn 58

https://github.com/bl4de/ctf/blob/master/2020/Midnight_Sun_2020_CTF/admpanel.md

2019

TAMUctf 2019

Bird Box, Web 478

https://github.com/bl4de/ctf/blob/master/2019/TAMUCTF_2019/writeups/Web2_Bird_Box_Challenge.md

Login App, Web 477

https://github.com/bl4de/ctf/blob/master/2019/TAMUCTF_2019/writeups/Web4_Login_App.md

2018

DEFCON QUALS 2018

sbva, Web 110

https://github.com/bl4de/ctf/blob/master/2018/DEF_CON_Quals_2018/sbva/sbva_web.md

INSHACK CTF 2018

Crimemail, Web 20

https://github.com/bl4de/ctf/blob/master/2018/INSHACK_CTF_2018/crimemail/Crimemail_Web20.md

Crypt0r part 1, Crypto 20

https://github.com/bl4de/ctf/blob/master/2018/INSHACK_CTF_2018/crypt0r/Crypt0r_Crypto20.md

nullcon HackIM 2018

Web2
https://github.com/bl4de/ctf/blob/master/2018/nullcon_CTF_2018/web2/web2_200.md

2017

CERT.PL ECSM 2017 CTF

Web1
https://github.com/bl4de/ctf/blob/master/2017/CERTPL_ECSM_2017/web1_writeup.md

Hack Dat Kiwi CTF 2017

MD5 Games, Web 50
https://github.com/bl4de/ctf/blob/master/2017/HackDatKiwi_CTF_2017/md5games1/md5games1.md

ASIS CTF 2017

Golem is Stupid!, Web 41
https://github.com/bl4de/ctf/blob/master/2017/ASIS_CTF_2017/Golem/Golem_Web_writeup.md

PlaidCTF 2017

zipper, Misc 50
https://github.com/bl4de/ctf/blob/master/2017/PlaidCTF_2017/zipper/zipper.md

Volga 2017 Quals

Bloody Feedback, Web 100 https://github.com/bl4de/ctf/blob/master/2017/Volga2017_CTF_Quals/Bloody_Feedback_Web_100/Bloody_Feedback_Web_100.md

Boston Key Party 2017

Prudentialv2, Cloud 50
https://github.com/bl4de/ctf/blob/master/2017/BostonKeyParty_2017/Prudentialv2/Prudentialv2_Cloud_50.md

nullcon HackIM 2017

Web1
https://github.com/bl4de/ctf/blob/master/2017/nullcon_HackIM_2017/Web1.md

Web2
https://github.com/bl4de/ctf/blob/master/2017/nullcon_HackIM_2017/Web2.md

AlexCTF 2017

Crypto, Scripting, Forensic, RE, Trivia challenges writeup from AlexCTF
https://github.com/bl4de/ctf/blob/master/2017/AlexCTF/alexctf_2017_challenges_writeups.md

2016

Hack The Vote 2016 CTF

Sanders Fan Club, Web 100
https://github.com/bl4de/ctf/blob/master/2016/HackTheVote_2016/Web100_Indiana/Sanders_Fan_Club_Web100.md

CSAW CTF Qualification Round 2016

mfw, Web 125
https://github.com/bl4de/ctf/blob/master/2016/CSAW_CTF_2016/mfw/mfw_web125.md

kill, Forensic 50
https://github.com/bl4de/ctf/tree/master/2016/CSAW_CTF_2016/kill

Tokyo Westerns / MMA CTF 2016

Global Site, Web 50
https://github.com/bl4de/ctf/tree/master/2016/Tokyo_Westerns_MMA_CTF_2016/Global_Page_Web_50

IceCTF 2016

Exposed, Web 60
Miners, Web 65
Scavenger Hunt, Misc 60
Hidden in Plain Sight, RE 45
https://github.com/bl4de/ctf/blob/master/2016/IceCTF/IceCTF_writeups.md

TU CTF 2016

Duck Print, Web 100
https://github.com/bl4de/ctf/tree/master/2016/TUCTF_2016/Duck_Print_Web100

Student Grades, Web 50
https://github.com/bl4de/ctf/tree/master/2016/TUCTF_2016/Student_Grades_Web50

Google Capture The Flag 2016

Ernst Echidna, Web 50
https://github.com/bl4de/ctf/tree/master/2016/Google_CTF_2016/Ernst_Echidna_Web_50

In Recorded Conversation, Forensic 25
https://github.com/bl4de/ctf/tree/master/2016/Google_CTF_2016/In_Recorded_Conversation_Forensic_25

Spotted Quoll, Web 50
https://github.com/bl4de/ctf/tree/master/2016/Google_CTF_2016/Spotted_Quoll_Web_50

Wallowing Wallabies, Web 25
https://github.com/bl4de/ctf/tree/master/2016/Google_CTF_2016/Wallowing_Wallabies_Web_25

internetwache 2016 CTF

0ldsk00lBlog, Web 80
https://github.com/bl4de/ctf/blob/master/2016/internetwache_2016/0ldsk00lBlog_Web80_writeup.md

Quick Run, Misc 60
https://github.com/bl4de/ctf/blob/master/2016/internetwache_2016/QuickRun_Misc60_writeup.md

Rock With The Shark, Misc 70 https://github.com/bl4de/ctf/blob/master/2016/internetwache_2016/RockWithTheShark_Misc70_writeup.md

nullcon HackIM 2016 CTF

Unicle, Web 200
https://github.com/bl4de/ctf/blob/master/2016/HackIM_2016/Unicle_Web200/Unicle_Web200_writeup.md

2015

Ekoparty 2015 CTF

Scytcrypto, Crypto 50 https://github.com/bl4de/ctf/blob/master/2015/Ekoparty_CTF_2015/Scytcrypto_Crypto50.md

XOR Crypter, Crypto 200 https://github.com/bl4de/ctf/blob/master/2015/Ekoparty_CTF_2015/XOR_Crypter_Crypto200.md

Hack.lu CTF 2015

Module Loader, Web 100 https://github.com/bl4de/ctf/blob/master/2015/HACK.LU_CTF_2015/Module_Loader_Web100_writeup.md

ASIS CTF Finals 2015

Biglie, Forensic 100
https://github.com/bl4de/ctf/blob/master/2015/ASIS_CTF_2015/Biglie_Forensic_100_writeup.md

CSAW CTF Qualification Round 2015

Lawn Care Simulator, Web 200 https://github.com/bl4de/ctf/blob/master/2015/CSAW_CTF_2015/LawnCareimulator_Web200_writeup.md

MMA CTF 2015

Uploader, Web 100
https://github.com/bl4de/ctf/blob/master/2015/MMACTF_2015/Uploader_Web100.md

Boston Key Party 2015

Birgham Circle, Web 25
https://github.com/bl4de/ctf/blob/master/2015/BostonKeyPartyCTF_2015/BrighamCircle.md

Museum of Fine Arts, Web 25
https://github.com/bl4de/ctf/blob/master/2015/BostonKeyPartyCTF_2015/MuseumOfFineArts.md

North Eastern University, Web 25
https://github.com/bl4de/ctf/blob/master/2015/BostonKeyPartyCTF_2015/NorthEasternUniv.md

Prudential, Web 25
https://github.com/bl4de/ctf/blob/master/2015/BostonKeyPartyCTF_2015/Prudential.md

Symphony, Web 25
https://github.com/bl4de/ctf/blob/master/2015/BostonKeyPartyCTF_2015/Symphony.md