Skip to content

Latest commit

 

History

History
328 lines (235 loc) · 48.9 KB

README.md

File metadata and controls

328 lines (235 loc) · 48.9 KB

CTF-scripts

This repository is made to upload some custom interesting scripts in different programming languages that are useful to solve CTF challenges.

Detailed write-ups are posted on my personal blog: https://7rocky.github.io/en/ctf.

For every challenge, there is a README.md file that has a link to the write-up.

The aim of this repository is to provide useful scripts that can be adapted to other circumstances and show how some techniques can be performed using a certain programming language.

Hope it is useful! 😄

BlackHat MEA CTF

Crypto Scripts / Programs Language Purpose
Ursa Minor solve.py Python RSA. Binary Search. Smooth primes
Pwn Scripts / Programs Language Purpose
fno-stack-protector solve.py Python 64-bit binary. Buffer Overflow. Redirect program execution
Robot Fatory solve.py Python 64-bit binary. Heap exploitation. Unsorted Bin attack. Fast Bin attack. GOT overwrite
Secret Note solve.py Python 64-bit binary. Buffer Overflow. Format String vulnerability. PIE, Canary, NX and ASLR bypass
Rev Scripts / Programs Language Purpose
Hope you know JS solve.py Python z3 solution to a set of conditions

corCTF

Crypto Scripts / Programs Language Purpose
fizzbuzz101 solve.py Python corCTF 2023. RSA decryption. LSB oracle
fizzbuzz102 solve.py Python corCTF 2023. RSA decryption. LSB oracle. LCG
qcg-k solve.py Python / SageMath corCTF 2023. DSA. Recurrence relation. Nonces
two-wrongs solve.py Python corCTF 2024. Quantum Computing. Quantum Error Correction

CrewCTF

Crypto Scripts / Programs Language Purpose
4ES solve.go
solve.py		 Go
Python		 CrewCTF 2024. AES. Meet-in-the-middle
Read between the lines solve.py Python / SageMath CrewCTF 2024. RSA. Integer linear relations. LLL lattice reduction
Pwn Scripts / Programs Language Purpose
Format muscle solve.py Python CrewCTF 2024. Format String vulnerability. musl libc. Exit handlers

CTFlearn

Binary Scripts / Programs Language Purpose
Favourite Color solve.py Python 32-bit binary. Buffer Overflow. Calling a function with arguments
Shell time! solve.py
solve2.py		 Python
Python		 32-bit binary. Buffer Overflow. ret2libc
Programming Scripts / Programs Language Purpose
Simple Programming solve.rb
solve2.rb		 Ruby
Ruby		 Iterate a file and count lines that match a condition

CTFZone

Crypto Scripts / Programs Language Purpose
Come on feel the nonce solve.py Python / SageMath CTFZone Quals 2023. ECDSA. Biased nonces. Hidden Number Problem. LLL lattice reduction
Right Decision solve.py Python CTFZone Quals 2023. Shamir Secret Sharing. System of equations

DiceCTF

Crypto Scripts / Programs Language Purpose
rps-casino solve.py Python DiceCTF 2024 Quals. LFSR. Modular arithmetic. z3
winter solve.py Python DiceCTF 2024 Quals. Winternitz One-Time Signature
yaonet solve.py Python / SageMath DiceCTF 2024 Quals. ECC. Baby-step, giant-step. Meet-in-the-middle
Pwn Scripts / Programs Language Purpose
baby-talk solve.py Python DiceCTF 2024 Quals. Heap exploitation. Null-byte poison. Overlapping chunks. Tcache poisoning

ECSC 2023

Crypto Scripts / Programs Language Purpose
Blind solve.sage SageMath ECDSA. Signature verification. XOR
Hide and seek solve.py Python / SageMath ECC. Point arithmetic. Discrete logarithm. Pohlig-Hellman
Irish flan solve.py Python / SageMath Quaternions. Matrix equations. Kernel
Kernel searcher solve.py Python / SageMath Isogeny. Finding curve parameters. Discrete logarithm
not crypto solve.py Python ROT13. Base64 encoding. ASCII bytes
Put a ring on it solve.py Python Ring signature. Oracle
RRSSAA solve.py Python Multi-prime RSA. PRNG seed. RSA-CRT decryption
Tough decisions solve.py Python / SageMath Learning With Errors. Modular arithmetic
Twist and shout solve.py Python / SageMath ECC. Invalid Curve Attack. Quadratic Twist
WOTS up solve.py Python Winternitz One-Time Signature. Hash functions. Induction
WOTS up 2 solve.py Python Winternitz One-Time Signature. Hash functions

Hack.lu CTF

Crypto Scripts / Programs Language Purpose
Spooky Safebox solve.py Python / SageMath Hack.lu CTF 2023. ECC. ECDSA. Public key recovery. Biased nonces. Hidden Number Problem. LLL lattice reduction

HackOn CTF

Crypto Scripts / Programs Language Purpose
Jorge Wants a Token solve.py Python / SageMath HackOn CTF 2024. JWT. ECDSA biased nonces. Hidden Number Problem. LLL lattice reduction. Discrete logarithm
Pwn Scripts / Programs Language Purpose
La casa de papel solve.py Python HackOn CTF 2024. Heap exploitation. Large Bin attack. FILE structure attack. Stack Pivot. ROP chain
Kerbab exploit.c C HackOn CTF 2024. Kernel exploitation. Heap exploitation. Off-by-one. seccomp rules
Noleak solve.py Python HackOn CTF 2024. Buffer Overflow. ROP. ret2dlresolve
Quememu exploit.c C HackOn CTF 2024. PCI device. MMIO. qemu escape. OOB read and write. mprotect and shellcode
Web Scripts / Programs Language Purpose
Guglu v2 solve.py Python HackOn CTF 2024. Flag exfiltration with boolean oracle

HackTheBoo CTF

Crypto Scripts / Programs Language Purpose
AHS512 solve.py Python Custom hash function. Bit operations
Forensics Scripts / Programs Language Purpose
Halloween Invitation solve.py Python Microsoft Office VBA macros deobfuscation
Pwn Scripts / Programs Language Purpose
Entity solve.py Python 64-bit binary. Union structure. Type confusion
Finale solve.py Python 64-bit binary. open-read-write ROP chain
Pumpking solve.py Python 64-bit binary. seccomp rules. Custom shellcode
Spooky Time solve.py Python 64-bit binary. Format String vulnerability. GOT overwrite

HITCON CTF

Crypto Scripts / Programs Language Purpose
Careless Padding solve.py Python HITCON CTF Quals 2023. Padding Oracle Attack. Custom padding. Guessing
Share solve.py Python / SageMath HITCON CTF Quals 2023. Shamir Secret Sharing. Lagrange interpolation. Chinese Remainder Theorem. multiprocessing

HTB Cyber Apocalypse

Crypto Scripts / Programs Language Purpose
Biased Heritage solve.py Python / SageMath HTB Cyber Apocalypse 2023. Schnorr signature. Hidden Number Problem. LLL lattice reduction
Colliding Heritage solve.py Python HTB Cyber Apocalypse 2023. Schnorr signature. MD5 collision
Converging Visions solve.py Python / SageMath HTB Cyber Apocalypse 2023. ECC. Binary search. Finding curve parameters. Smart's attack. PRNG
Elliptic Labyrinth solve.py Python HTB Cyber Apocalypse 2023. ECC. Finding curve parameters
Elliptic Labyrinth Revenge solve.py Python / SageMath HTB Cyber Apocalypse 2023. ECC. Finding curve parameters. Coppersmith method on a bivariate polynomial
Partial Tenacity solve.py Python HTB Cyber Apocalypse 2024. RSA. Partially-known private information. Modular arithmetic
Tsayaki solve.py Python HTB Cyber Apocalypse 2024. TEA. Equivalent keys. CBC mode
Hardware Scripts / Programs Language Purpose
HM74 solve.py Python HTB Cyber Apocalypse 2023. Noisy channel. Hamming codes. Statistically find correct message blocks
Misc Scripts / Programs Language Purpose
Calibrator solve.py Python HTB Cyber Apocalypse 2023. Binary search. Euclidean distance
Path of Survival solve.py Python HTB Cyber Apocalypse 2024. Path-finding. Breadth-first Search. Dijkstra's algorithm
Pwn Scripts / Programs Language Purpose
Control Room solve.py Python HTB Cyber Apocalypse 2023. 64-bit binary. OOB write. GOT overwrite
Labyrinth solve.py Python HTB Cyber Apocalypse 2023. 64-bit binary. Buffer Overflow. Redirecting program execition
Gloater solve.py Python HTB Cyber Apocalypse 2024. 64-bit binary. Heap exploitation. House of Spirit. Overlapping chunks. Tcache poisoning. TLS-Storage dtor_list
Maze of Mist solve.py Python HTB Cyber Apocalypse 2024. 32-bit binary. Buffer Overflow. vDSO ROP. sys_execve
Math Door solve.py Python HTB Cyber Apocalypse 2023. 64-bit binary. Heap exploitation. Heap feng shui. Tcache poisoning. FILE structure attack
Oracle solve.py Python HTB Cyber Apocalypse 2024. 64-bit binary. Heap exploitation. Buffer Overflow. ROP
Pandora's Box solve.py Python HTB Cyber Apocalypse 2023. 64-bit binary. Buffer Overflow. ret2libc
Void solve.py Python HTB Cyber Apocalypse 2023. 64-bit binary. Buffer Overflow. ret2dlresolve

HTB UniCTF

Crypto Scripts / Programs Language Purpose
AESWCM solve.py Python HTB UniCTF 2022. Custom encryption using AES and XOR
Bank-er-smith solve.py Python / SageMath HTB UniCTF 2022. RSA. Known bits. Coppersmith attack
Clutch solve.py Python HTB UniCTF 2024. Quantum Criptography. Frame-based Quantum Key Distribution
Mayday Mayday solve.py Python / SageMath HTB UniCTF 2023. RSA-CRT. Modular arithmetic. Coppersmith method
MSS Revenge solve.py Python HTB UniCTF 2023. Mignotte Secret Sharing. Modular arithmetic. Chinese Remainder Theorem
Zombie Rolled solve.sage SageMath HTB UniCTF 2023. Fractions. GCD. RSA signature. Coppersmith method on bivariate polynomial
Pwn Scripts / Programs Language Purpose
Dead or Alive solve.py Python HTB UniCTF 2024. 64-bit binary. Heap exploitation. House of Spirit. Heap feng-shui. Overlapping chunks. Tcache poisoning. TLS-storage dtor_list
Great Old Talisman solve.py Python HTB UniCTF 2023. 64-bit binary. OOB write. Partial GOT overwrite
Sacred Scrolls solve.py Python HTB UniCTF 2022. 64-bit binary. Buffer Overflow. ret2libc
Spellbook solve.py Python HTB UniCTF 2022. 64-bit binary. Heap exploitation. Use After Free. Fast Bin attack
Zombiedote solve.py Python HTB UniCTF 2023. 64-bit binary. Heap exploitation. OOB read and write. Integer Overflow. Floating-point numbers. TLS-storage dtor_list
Zombienator solve.py Python HTB UniCTF 2023. 64-bit binary. Heap exploitation. Buffer Overflow. Floating-point numbers. Canary bypass. ret2libc. Oracle
Reversing Scripts / Programs Language Purpose
Potion Master solve.py Python HTB UniCTF 2022. z3 solution to a set of conditions
Web Scripts / Programs Language Purpose
BatchCraft Potions solve.py Python HTB UniCTF 2022. GraphQL batching attack. Send XSS and DOM Clobbering payload
Breaking Bank solve.py Python HTB UniCTF 2024. Open Redirect. JWKS and JWT forgery. OTP bypass

ImaginaryCTF

Crypto Scripts / Programs Language Purpose
Easy DSA: Elated once solve.py Python ImaginaryCTF 24/01/2023. 100 points. DSA. LCG. Modular system of equations
Easy DSA: Lovely Little Lane solve.py Python / SageMath ImaginaryCTF 21/01/2023. 125 points. DSA. Hidden Number Problem. LLL lattice reduction
Personalized solve.py Python / SageMath ImaginaryCTF 07/08/2022. 75 points. RSA. PRNG seed. CRT
Rather Secure Attachment solve.py Python ImaginaryCTF 08/12/2022. 100 points. RSA. Cipolla's Algorithm
Relatively Small Arguments solve.py Python ImaginaryCTF 14/07/2022. 75 points. RSA. Wiener's attack
Ron was wrong, Whit is right solve.py Python ImaginaryCTF 28/11/2022. 75 points. RSA. Greatest Common Divisor. Bad PRNG
Rotating Secret Assembler solve.py Python ImaginaryCTF 05/07/2022. 50 points. RSA. Greatest Common Divisor
Pwn Scripts / Programs Language Purpose
Notepad as a Service solve.py Python ImaginaryCTF 11/07/2022. 75 points. 64-bit binary. Buffer Overflow. ret2libc. Canary and ASLR bypass
show-me-what-you-got solve.py Python ImaginaryCTF 08/08/2022. 75 points. 64-bit binary. Format String vulnerability. GOT overwrite
Reversing Scripts / Programs Language Purpose
xorrot solve.py Python ImaginaryCTF 07/07/2022. 50 points. XOR cipher with rotating key

m0leCon CTF

Reversing Scripts / Programs Language Purpose
Go Sweep solve.go Go m0lecon CTF 2025 Teaser. Go binary. PRNG. Time-based seed. Threads

picoCTF

Binary Exploitation Scripts / Programs Language Purpose
seed-sPRiNG prng.c C picoCTF 2019. 350 points. 32-bit binary. PRNG
zero_to_hero solve.py Python picoCTF 2019. 500 points. 64-bit binary. Heap exploitation. Null byte poisoning. Tcache poisoning
Guessing Game 1 solve.py Python picoCTF 2020 Mini-Competition. 250 points. 64-bit static binary. Buffer Overflow. ROP chain
Guessing Game 2 solve.py Python picoCTF 2020 Mini-Competition. 300 points. 32-bit binary. Buffer Overflow and Format String. ret2libc. Bypass ASLR and canary
Bizz Fuzz find_bof.py
solve.py		 Python
Python		 picoCTF 2021. 500 points. 32-bit binary. Reversing. Long way to a hidden Buffer Overflow. Redirecting program execution
filtered-shellcode code.asm Assembly picoCTF 2021. 160 points. 32-bit binary. Custom shellcode
Here's a LIBC solve.py
solve2.py		 Python
Python		 picoCTF 2021. 90 points. 64-bit binary. Buffer Overflow. ret2libc
Stonks solve.py Python picoCTF 2021. 20 points. 32-bit binary. Format String. Memory leaks
The Office canary.c
solve.py
solve2.py		 C
Python
Python		 picoCTF 2021. 400 points. 32-bit binary. Heap Exploitation. Heap overflow. PRNG. Use After Free
Unsubscriptions Are Free solve.py Python picoCTF 2021. 100 points. 32-bit binary. Heap exploitation. Use After Free
fermat-strings solve.py Python picoMini by redpwn. 250 points. 64-bit binary. Format String. GOT overwrite and ASLR bypass
SaaS solve.py Python picoMini by redpwn. 350 points. 64-bit binary. seccomp rules. Custom shellcode
Cryptography Scripts / Programs Language Purpose
Sum-O-Primes solve.py Python picoCTF 2022. 400 points. RSA decryption

Plaid CTF

Crypto Scripts / Programs Language Purpose
DHCPPP solve.py Python / SageMath Plaid CTF 2024. ChaCha20-Poly1305. Nonce reuse. DNS
Paranormial Commitment Scheme solve.py Rust Plaid CTF 2024. BLS12-381. Elliptic curve pairings. Lagrange interpolation

SECCON CTF

Crypto Scripts / Programs Language Purpose
plai_n_rsa solve.py Python SECCON CTF Quals 2023. RSA. Euler totient function

Securinets

Crypto Scripts / Programs Language Purpose
Farfour Post Quantom solve.py Python / SageMath Securinets Quals 2023. Matrix operations. Modular arithmetic. Shuffling. Solve system of equations
PolyLCG solve.py Python Securinets Quals 2023. Modular polynomials
Pwn Scripts / Programs Language Purpose
scrambler solve.py Python Securinets Finals 2022. 64-bit binary. ROP. ret2libc. GOT overwrite. Stack Pivot. seccomp rules

SEETF

Crypto Scripts / Programs Language Purpose
Close Enough solve.py Python SEETF 2022. RSA. Wrong implementation
Rev Scripts / Programs Language Purpose
babyreeee solve.py Python SEETF 2022. Revert encryption algorithm. XOR

SekaiCTF

Crypto Scripts / Programs Language Purpose
cryptoGRAPHy 1 solve.py Python SekaiCTF 2023. Graph Encryption Scheme. Key leakage. Decryption
cryptoGRAPHy 2 solve.py Python SekaiCTF 2023. Graph Encryption Scheme. Single-Destination Shortest Path. Node degrees
cryptoGRAPHy 3 solve.py Python SekaiCTF 2023. Graph Encryption Scheme. Query recovery. Tree isomorphisms
Noisy CRC solve.py Python / SageMath SekaiCTF 2023. CRC. Chinese Remainder Theorem. Brute force
はやぶさ solve.py Python / SageMath SekaiCTF 2024. Falcon. Lattice attack on NTRU. BKZ. Key recovery attack
マスタースパーク solve.py Python / SageMath SekaiCTF 2024. Isogeny-based cryptography. CSIDH. Discrete logarithm. CRT
Pwn Scripts / Programs Language Purpose
speedpwn solve.py Python SekaiCTF 2024. Uninitialized values. Oracle. FILE structure attack. GOT overwrite

TeamItaly CTF

Crypto Scripts / Programs Language Purpose
Big RSA solve.py Python TeamItaly CTF 2023. RSA. Factorial. Modular arithmetic. Integer division
Scrambled Pizzeria solve.py Python TeamItaly CTF 2023. XOR. Permutations and substitutions