Operation Orchid Description Download this disk image and find the flag. Note: if you are using the webshell, download and extract the disk image into /tmp not your home directory. Download compressed disk image Solving Check the file type of the file via file image It’s an image of a harddrive disk, to mount it, we need to calculate the
Operation Oni Description Download this disk image, find the key and log into the remote machine. Note: if you are using the webshell, download and extract the disk image into /tmp not your home directory. Download disk image Remote machine: ssh -i key_file -p 60303 ctf-player@saturn.picoctf.net Solving Mounting the disk image (it is a msdos mbr partition… whole disk) Create
Lookey here Description Attackers have hidden information in a very large mass of data in the past, maybe they are still doing it. Download the data here. Solving Download File Cat File | grep picoCTF* You also can grep directly with grep -o "picoCTF{.*}" Feel free to use the getflag script. #!/bin/bash echo "Getting flag for you…" grep -o "picoCTF{.*}"
File types Description This file was found among some files marked confidential but my pdf reader cannot read it, maybe yours can. You can download the file from here. Solving The file Flag.pdf isn’t a pdf file If you check it with file Flag.pdf, you’ll see, that it is a shell archive Flag.pdf: shell archive text If you execute this
Enhance! Description Download this image file and find the flag. Download image file Solving Lets have a look at the svg file It looks like a normal file In the last lines of the file, in the tspan tag, we can see some interessting characters… looks like the end of the flag. id=“tspan3764″>F { 3 n h 4 n c
buffer overflow 1 Description Control the return address Now we’re cooking! You can overflow the buffer and return to the flag function in the program. You can view source here. And connect with it using nc saturn.picoctf.net 51721 Info The links could be different.. the instance will be different (you have to launch your own in CTF) Solving This is
buffer overflow 0 Description Smash the stack Let’s start off simple, can you overflow the correct buffer? The program is available here. You can view source here. And connect with it using: nc saturn.picoctf.net 65445 Solving Download the sourcecode and the program If we check the sourcecode we will see, that a sigsev will give us a flag Playing with
RPS Description Here’s a program that plays rock, paper, scissors against you. I hear something good happens if you win 5 times in a row. Connect to the program with netcat: nc saturn.picoctf.net 53296 The program’s source code with the flag redacted can be downloaded here. Solving Checking the code (as mentioned in the hint of the challenge) In the
CVE-XXXX-XXXX Description Enter the CVE of the vulnerability as the flag with the correct flag format: picoCTF{CVE-XXXX-XXXXX} replacing XXXX-XXXXX with the numbers for the matching vulnerability. The CVE we’re looking for is the first recorded remote code execution (RCE) vulnerability in 2021 in the Windows Print Spooler Service, which is available across desktop and server versions of Windows operating systems.
flag leak Description Story telling class 1/2 I’m just copying and pasting with this program. What can go wrong? You can view source here. And connect with it using: nc saturn.picoctf.net 51385 Solving This is a format string attack. So if we use some magic to send some format strings to the app, this should get us the flag. Here