Custom CTF Challenges

This private repository stores all the CTF challenges that have been used in previous BYU Capture the Flag competitions. They are sorted by category, and include the description, files, and a writeup (with the flag).

Challenges

Category - CLI

• Source Port (Winter 2022) - easy
• If two witches would watch two watches, which witch would watch which watch (Winter 2022) - easy
• More pain (Winter 2022) - medium
• qrsh (Winter 2022) - medium

Category - Cryptography

• Simple (Fall 2021) - very easy
• Dit Dah (Fall 2021) - very easy
• Truth and Falsehood (Winter 2022) - easy
• Hamilton (Fall 2022) - easy
• Dino Friend (Fall 2022) - easy
• Vigenere 1 (Fall 2022) - easy
• Call Me Maybe (Winter 2023) - easy
• For Sparta (Winter 2023) - easy
• Invisible (Fall 2021) - medium
• Woodchuck (Fall 2021) - medium
• Forgotten (Fall 2021) - medium
• A-A-Ron (Winter 2022) - medium
• Shouty 2 (Winter 2022) - medium
• One Time Pad (Winter 2022) - medium
• RSeAsy (Winter 2022) - medium
• K3ndr1ck L3m@r (Winter 2022) - medium
• Bangers (Fall 2022) - medium
• A Fine Cipher (Fall 2022) - medium
• Sore Dino (Fall 2022) - medium
• Vigenere 2 (Fall 2022) - medium
• Agent Carter (Winter 2023) - medium
• smashbangcrashboom (Winter 2023) - medium
• Wiki Game (Fall 2021) - hard
• Too Many Times (Winter 2022) - hard
• The Most Worthy Distinction of Pain (Winter 2022) - hard
• Dorian Hawkmoon (Winter 2022) - hard
• Dino Cipher (Fall 2022) - hard
• Paper (Fall 2022) - hard
• b-z then 10 (Winter 2023) - hard

Category - Forensics/Steganography

Steganography

• Incorrect (Fall 2021) - easy
• Details (Fall 2021) - easy
• Samus (Fall 2021) - easy
• Pixecutable (Winter 2022) - easy
• Janes Message (Fall 2022) - easy
• Swimming Secret (Fall 2022) - easy
• Sneaky (Fall 2022) - easy
• Charlie the Fish (Winter 2023) - easy
• Charlie the Fish 2 (Winter 2023) - easy
• thetoymaker (Winter 2023) - easy
• Wyatt P Memorial Watertower the Sequel
• Cyber Risk (Fall 2021) - medium
• Cyber Risk 2 (Fall 2021) - medium
• steggiboi (Fall 2022) - medium
• Bames Jond has Stronk (Winter 2023) - medium
• Blue 3 (Winter 2022) - hard

Network Forensics

• Packets (Fall 2021) - medium
• Ding Dong (Winter 2022) - medium

Windows XP

• Retro 1 (Fall 2021) - easy
• Retro 2 (Fall 2021) - easy
• Retro 3 (Fall 2021) - medium
• Retro 4 (Fall 2021) - medium
• Retro 5 (Fall 2021) - hard
• Retro 6 (Fall 2021) - hard

Digital Files/Folders

• Liam's Idea (Winter 2022) - easy
• Shiny (Winter 2022) - easy
• Access (Winter 2022) - medium
• Leak Final (Fall 2022) - medium
• 緑 (Winter 2022) - hard
• .bash_history (Fall 2021) - hard
• Wordpress (Fall 2021) - hard
• Routing (Fall 2021) - hard
• zip (Fall 2022) - hard
• PNG (Fall 2022) - hard
• Kyuukon (Fall 2022) - hard

Winter 2023 Forensics Series

• Challenge 1 (Winter 2023) - easy
• Challenge 2 (Winter 2023) - easy
• Challenge 3 (Winter 2023) - easy
• Challenge 4 (Winter 2023) - medium
• Challenge 5 (Winter 2023) - medium
• Challenge 6 (Winter 2023) - hard

Other

• Austenland (Fall 2021) - medium
• Qool Raster (Winter 2022) - medium
• Uncle Iroh (Fall 2022) - medium
• Grayscale (Fall 2020, Winter 2021) - hard
• dinOS (Fall 2022) - hard
• Paleontology (Fall 2022) - extreme
• Knots (Fall 2022) - extreme

Category - Jail

• Predictodactyl (Fall 2022) - easy
• Python Jail 1 (Fall 2021) - medium
• Python Jail 2 (Fall 2021) - medium
• Python Jail (Fall 2022) (Fall 2022) - medium
• Python Jail 3 (Fall 2021) - hard
• Python Jail 4 (Fall 2021) - hard

Category - Miscellaneous

• Because Your Urlisvalid (Fall 2021) - easy
• Certified Legitness (Fall 2021) - easy
• Powershell 2 (Fall 2021) - easy
• Composer (Fall 2021) - easy
• ASCII Art (Winter 2022) - easy
• Jukebox (Winter 2022) - easy
• Wordle (Winter 2022) - easy
• Copilot (Winter 2022) - easy
• Probably (Winter 2022) - easy
• Super CTF Land (Fall 2022) - easy
• Roblox (Fall 2022) - easy
• CLI (Fall 2021) - medium
• Composer 2 (Fall 2021) - medium
• Powershell 1 (Fall 2021) - medium
• Powershell 3 (Fall 2021) - medium
• ASCII Art 2 (Winter 2022) - medium
• Chad "The Jaw" Bronson (Winter 2022) - medium
• Clavier (Winter 2022) - medium
• Roblox2 (Fall 2022) - medium
• Dino Language (Fall 2022) - medium
• Not cosmo (Fall 2022) - medium
• Adversarial ML (Fall 2022) - medium
• Strong Passwords (Fall 2022) - medium
• Programming Challenges (Fall 2022) - medium
• Secure Password Manager (Fall 2022) - medium
• RawrXD (Fall 2022) - medium
• Sluethr (Winter 2023) - medium
• Oh, Babylon (Winter 2022) - hard
• Release the Crakin (Winter 2022) - hard
• Super CTF Land 2 (Fall 2022) - hard
• Buzz Off (Fall 2022) - hard
• Powershell 4 (Fall 2021) - extreme

Category - Social Engineering / OSINT

• Links (Winter 2021, Summer 2021) - easy
• Cyber Warriors 1 (Fall 2021) - easy
• Inside the Cyber Warrior #2 (Fall 2021) - easy
• the man in the golden jacket (Winter 2023) - easy
• CSA Conference (Winter 2023) - easy
• I love to see the temple (Winter 2023) - easy
• Cert (Summer 2021) - medium
• Domain (Summer 2021) - medium
• Were U At (Summer 2021) - medium
• Y Not (Fall 2021) - medium
• Okta? More like Okna (Winter 2022) - Medium
• Monuments and Memes (Winter 2023) - medium
• The OG MITM. (Winter 2023) - medium
• Googlefu Crossword (Winter 2021) - hard
• Everything is an OSINT problem if you try hard enough (Fall 2021) - hard
• Magnum Opus (Winter 2022) - Insane

Social Media

• Birthday (Summer 2021) - easy
• Accounts (Summer 2021) - medium
• BBB (Fall 2021) - medium

Image Location

• Dang BYU Parking (Fall 2021) - easy
• Natty (Winter 2022) - easy
• NonSecurityClearance (Winter 2022) - easy
• Killer view eh (Fall 2021) - medium
• Abiteboul's Digits (Winter 2022) - Medium
• Ode to Ye Olde Cougar Net (Fall 2021) - hard
• Oh the roads you'll go (Fall 2021) - hard

Jonathan Jiles

• In which you meet Johnny (Fall 2021) - easy
• In which Johnny shares his feelings (Fall 2021) - medium
• In which Johnny gets creative (Fall 2021) - easy
• In which Johnny gets speed (Fall 2021) - hard
• In which Johnny meets Physics (Fall 2021) - hard

Buckeye Billy

• Buckeye Billy Birthday (Winter 2022) - Medium
• Buckeye Billy Baggage (Winter 2022) - Hard/Insane

BYU OSINT

• BYU OSINT Challenge #1 (Fall 2022) - medium
• BYU OSINT Challenge #2 (Fall 2022) - medium
• BYU OSINT Challenge #3 (Fall 2022) - easy
• BYU OSINT Challenge #4 (Fall 2022) - easy
• BYU OSINT Challenge #5 (Fall 2022) - hard
• BYU OSINT Challenge #6 (Fall 2022) - medium
• BYU OSINT Challenge #7 (Fall 2022) - medium

Category - Password Cracking

• MD5 (Fall 2021) - easy
• SHA512 (Fall 2021) - easy
• NTLM (Fall 2021) - easy
• Guessy (Fall 2021) - medium
• Shadows (Fall 2021) - medium
• WinRawr (Fall 2022) - medium
• Yes (Fall 2022) - medium
• Fruits (Fall 2021) - hard
• Wordlist (Fall 2021) - hard
• Winword (Fall 2021) - hard
• Personal (Fall 2021) - hard
• Automation (Winter 2021) - hard
• Evolution (Fall 2022) - hard

006 Series

• 006 I (Winter 2023) - easy
• 006 II (Winter 2023) - medium
• 006 III (Winter 2023) - medium

Winter 2023 Series

• Password 1
• Password 2
• Password 3
• Password 4

Category - Pentesting

• Plain (Winter 2022) - medium
• Awkward (Winter 2022) - hard
• Disaster (Winter 2022) - extreme
• mi6configuration 1 (Winter 2023) - medium
• mi6configuration 2 (Winter 2023) - medium
• mi6configuration 3 (Winter 2023) - medium

Category - Pwn

• Library (Fall 2022) - easy
• Offset (Fall 2022) - easy
• env (Fall 2022) - easy
• Start (Fall 2022) - easy
• Overflow (Fall 2022) - medium
• Ret2win (Fall 2022) - medium
• Pwntools (Fall 2022) - medium
• Redirection (Fall 2022) - hard
• Pie (Fall 2022) - hard

Category - Reverse Engineering

• Stone moon (Winter 2022) - medium
• C-Spring (Winter 2022) - medium
• e (Fall 2022) - hard

Binary

• Binary (Fall 2021) - easy
• Arr (Fall 2021) - medium
• Symbolless (Fall 2022) - medium
• XOR (Fall 2021) - hard
• Vorobouros (Fall 2022) - hard

Python

• Python intro (Winter 2022) - very easy
• Fun Fact (Winter 2022) - medium
• Python VM (Fall 2022) - medium
• Bad (Fall 2021) - hard

JavaScript

• Don't Get Phished (Fall 2022) - easy
• Windows XP (Winter 2022) - medium
• Uglified (Fall 2022) - medium
• Web Bad (Fall 2021) - hard

Category - Signal (SIGINT)

• Sig 1 (Summer 2021, Fall 2021) - hard
• Sig 2 (Summer 2021, Fall 2021) - hard
• Sig 3 (Summer 2021, Fall 2021) - hard
• Sig 4 (Summer 2021, Fall 2021) - extreme

Category - Threat Intel

• Program (Fall 2021) - easy
• Name (Fall 2021) - easy
• MITRE Challenge 1 (Fall 2022) - easy
• MITRE Challenge 2 (Fall 2022) - easy
• Linked domain (Fall 2021) - medium
• MITRE Challenge 3 (Fall 2022) - medium
• Crossy (Winter 2023) - medium
• Country (Fall 2021) - hard
• MITRE Challenge 4 (Fall 2022) - hard

On The Job Series

• On The Job 1 (Winter 2023) - easy
• On The Job 2 (Winter 2023) - easy
• On The Job 3 (Winter 2023) - easy
• On The Job 4 (Winter 2023) - medium
• On The Job 5 (Winter 2023) - medium
• On The Job 6 (Winter 2023) - medium

Category - Trivia

• Trivia 1 - Dr. Lunt (Winter 2022) - easy
• Trivia 2 - Backpack (Winter 2022) - easy
• Trivia 3 - Fives (Winter 2022) - medium
• Trivia 4 - CTF Group Plug (Winter 2022) - easy
• Trivia 5 - Ancient Secrets (Winter 2022) - medium
• Trivia 6 - Lesser Known Giant (Winter 2022) - medium
• Trivia 7 - 543 Bitcoins worth (Winter 2022) - easy
• Trivia 8 - Shields up! Present-day Captain America (Winter 2022) - easy

Category - Unredact

• Unredact Word (Winter 2022) - easy
• Unredact PDF (Winter 2022) - easy
• Obfuscationnn (Winter 2022) - easy
• GIMP (Winter 2022) - medium
• Pixels (Winter 2022) - medium
• Reconstruct (Winter 2022) - hard

Category - Web Exploitation

• Error (Fall 2021) - very easy
• Source (Fall 2021) - very easy
• Client-side (Fall 2021) - easy
• Please Avoid (Fall 2021) - easy
• Spoof (Winter 2022) - easy
• Hidden (Winter 2022) - easy
• Website Shenanigans (Winter 2022) - easy
• IOT (Fall 2022) - easy
• Journey (Fall 2022) - easy
• Ice Cream Store (Fall 2022) - easy
• Squirrel Injection (Fall 2022) - easy
• IMF Flag Portal (Winter 2023) - easy
• KGB (Winter 2023) - easy
• AlexRider (Winter 2023) - easy
• shakennotstirred (Winter 2023) - easy
• Whereisthestolenmoonrakershuttle (Winter 2023) - easy
• Web-Inator (Winter 2023) - easy
• Brid (Fall 2021) - medium
• Fragment (Winter 2022) - medium
• Fetaverse (Winter 2022) - medium
• Black (Winter 2022) - medium
• Command (Fall 2022) - medium
• the-red-room - medium
• Grafana (Winter 2022) - hard
• Social Media (Winter 2022) - hard
• good ol days (Fall 2022) - hard
• Social Media 2 (Winter 2022) - extreme