A repository for CTF challenges I created. Have fun playing CTFs π
- SECCON CTF 2023 Finals
- SECCON CTF 2023 Quals
- SECCON CTF 2022 Finals
- SECCON CTF 2022 Quals
- SECCON CTF 2021
Sat, 23 Dec. 2023, 01:00 UTC β Sun, 24 Dec. 2023, 09:00 UTC
Challenge | Category | Solved / 12 (International) |
Solved / 12 (Domestic) |
Difficulty | Writeup | Keywords |
---|---|---|---|---|---|---|
babywaf | web | 8 | 4 | β | link | WAF bypass |
cgi-2023 | web | 5 | 2 | β β β | link | XS-Leak, subresource integrity |
LemonMD | web | 2 | 1 | β β β | link | Fresh, Islands Architecture |
DOMLeakify | web | 1 | 0 | β β β β β | link | CSS injection on style attributes |
whitespace.js | misc | 2 | 2 | β β | link | JavaScript sandbox |
Sat, 16 Sept. 2023, 05:00 UTC β Sun, 17 Sept. 2023, 05:00 UTC
Challenge | Category | Solved / 653 | Difficulty | Writeup | Keywords |
---|---|---|---|---|---|
blink | web | 14 | β β | link | DOM clobbering |
eeeeejs | web | 12 | β β β | link | ejs, XSS puzzle |
hidden-note | web | 1 | β β β β β | link | XS-Leak, unstable sort |
crabox | sandbox | 53 | β | link | Rust sandbox |
node-ppjail | sandbox | 5 | β β β | link | prototype pollution |
deno-ppjail | sandbox | 2 | β β β β | link | prototype pollution |
Sat, 11 Feb. 2023, 01:00 UTC β Sun, 12 Feb. 2023, 09:00 UTC
Challenge | Category | Solved / 10 (International) |
Solved / 12 (Domestic) |
Difficulty | Writeup | Keywords |
---|---|---|---|---|---|---|
babybox | web | 6 | 4 | β | link | prototype pollution |
easylfi2 | web | 10 | 8 | β | link | LFI, curl |
MaaS | web | 3 | 1 | β β β | link | newline normalization, CSP bypass |
light-note | web | 0 | 0 | β β β | link | DOM clobbering, Sanitizer API |
dark-note | web | 0 | 0 | β β β β | link | time-based oracle |
Sat, 12 Nov. 2022, 05:00 UTC β Sun, 13 Nov. 2022, 05:00 UTC
Challenge | Category | Solved / 726 | Difficulty | Writeup | Keywords |
---|---|---|---|---|---|
skipinx | web | 102 | β | link | query parser |
easylfi | web | 62 | β | link | LFI, curl |
bffcalc | web | 41 | β β | link | HTTP request splitting |
piyosay | web | 19 | β β β | link | Trusted Types, DOMPurify, RegExp |
denobox | web | 1 | β β β β | link | prototype pollution, import maps |
spanote | web | 1 | β β β β β | link | Chrome, disk cache, bfcache |
latexipy | misc | 8 | β β | link | pyjail, magic comment |
txtchecker | misc | 23 | β β | link | magic file, ReDoS |
noiseccon | misc | 22 | β β | link | Perlin noise |
Sat, 11 Dec. 2021, 05:00 UTC β Sun, 12 Dec. 2021, 05:00 UTC
Challenge | Category | Solved / 506 | Difficulty | Writeup | Keywords |
---|---|---|---|---|---|
Sequence as a Service 1 | web | 20 | β β | link | JavaScript sandbox |
Sequence as a Service 2 | web | 19 | β | link | JavaScript sandbox |
Cookie Spinner | web | 7 | β β β | link | DOM clobbering |
x-note | web | 3 | β β β β | link | XS-Search |