This is some challenges I created for CTF competitions.
It is recommended to read Crypto writeups here, because it supports math rendering. 2022/05/22: GitHub supports MathJax rendering on GitHub now, but it still have some compatibility issues, so you might still want to use the url above when having issues.
Name | Category | Tags | Difficulty |
---|---|---|---|
Futago | Crypto, CSC | RSA | ★ |
RNG++ | Crypto | LCG | ★★ |
babyRSA | Crypto | RSA, ECC | ★★ |
Top Secret | Crypto | GF, dlog | ★★☆ |
Cipher Switching Service | Crypto | RSA, ElGamal | ★★☆ |
Signature | Crypto | ECDSA, LLL, AES-CTR | ★★★ |
RNG+++ | Crypto | LCG, LLL | ★★★☆ |
Nim Notes | Web | Script Gadgets, CSRF, CRLF Injection, CSP | ★★★☆ |
Genie [1] | Web, Crypto | Path traversal, AES-CBC, Deserialization | ★★★☆ |
Just a pyjail | Misc | Pyjail | ★★★ |
[1]: This challenge is made by both @splitline and me.
Name | Category | Tags | Difficulty |
---|---|---|---|
BabySSS | Crypto | SSS, CRT | ★☆ |
Superprime | Crypto | Binary Search, Prune and Search | ★★☆ |
Chimera | Crypto | ECM, LLL/Coppersmith, ECDLP, Hidden Subset Sum | ★★★★ |
LemMinX | Misc | LSP, XXE | ★★★ |
Secure Paste | Web, Crypto | JSONP, Cipher Suite Confusion, DOMPurify, CSP | ★★★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Share | Crypto | SSS, CRT | ★★ |
EZRSA | Crypto | ECC, Wiener, ECM | ★★☆ |
Echo | Crypto | RSA, Index Calculus, LLL | ★★★ |
Random Shuffling Algorithm | Crypto | Noisy CRT, Coppersmith | ★★★☆ |
Collision | Crypto | Code Review, Python Hash Collision | ★★★☆ |
Lisp.js | Misc | Node.js Jail | ★★★ |
Login System | Web | TE.TE, JSON Injection, YAML | ★★★ |
Canvas | Web | JS Jail, Worker, CSP | ★★★☆ |
Harmony | Web | Electron | ★★★★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
ZKPoF | Crypto | Python, Coppersmith | ★★ |
BrokenShare | Crypto | SSS, LLL | ★★★ |
Hyper512 | Crypto | LFSR, FCA | ★★★☆ |
ECLCG | Crypto | ECDSA, LCG, LLL | ★★★★ |
MatProd | Crypto | Linear Algebra, LLL | ★★★★ |
Flag Reader | Misc | Tar | ★☆ |
RClonE | Web | CSRF, RCE | ★★ |
Truth of NPM | Web | Deno, LFI, RCE | ★★★ |
Private Browsing+ | Web | XSS, Response Splitting | ★★★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Tan | Crypto | LLL | ★★ |
Wasteful | Crypto | RSA, Coppersmith | ★★ |
Sus | Crypto | RSA, Math | ★★☆ |
Imaginary Casino | Crypto | CSIDH, RNG | ★★☆ |
Login | Web | PHP | ★☆ |
Sanitized | Web | DOMPurify, XHTML | ★★★ |
Sanitized Revenge | Web | DOMPurify, XHTML | ★★★ |
Typechecker | Reverse | TypeScript, Math | ★★ |
Get and set | Misc | Pyjail | ★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
lf3r | Crypto | LFSR | ★★☆ |
coast | Crypto | Isogeny | ★★☆ |
notitle | Crypto | DLP, LLL | ★★★ |
pacap | Crypto | Coppersmith | ★★★ |
vokram | Reverse | Markov Algorithm | ★★★ |
readme | Web | Path Normalization | ★ |
readme2 | Web | Bun, HTTP | ★★ |
calc | Misc | Pyjail | ★★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Really Simple Algorithm | Crypto | RSA, Continued Fractions | ★★ |
Minimal | Pwn | Stack pivoting, read(2) return value, SROP | ★★ |
These two challenges are created before I became a board of ImaginaryCTF.
Name | Category | Tags | Difficulty |
---|---|---|---|
Box | Crypto | Affine function | ☆ |
pqqp | Crypto | RSA, Number Theory | ★ |
First RSA | Crypto | RSA | ★☆ |
No modulus | Crypto | RSA, LLL | ★★★ |
Login Please | Web | JavaScript, Prototype | ★ |
Read | Pwn | Shellcoding | ★☆ |
Not a kernel pwn | Misc | Privilege Escalation | ★☆ |
Free Shell | Misc | Bash | ★★ |
Here's some Rev v2 | Reverse | Pyc | ☆ |
Here's some Rev v3 | Reverse | LCG | ★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
RSA-CBC | Crypto | RSA | ☆ |
RSA-CBC v2 | Crypto | RSA, Coppersmith | ★☆ |
Mobius | Crypto | Rational Function, LLL | ★★☆ |
Hello World as a Service | Misc | Java, Quirks | ★☆ |
Baby Shell | Pwn | C++, std::string_view, UAF | ★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Substitution | Crypto | RSA, Search | ★☆ |
Unchanged | Reverse | pthread, LCG | ★☆ |
Filter Master | Web | PHP, filter | ★★ |
Half FFT | Misc | FFT, LLL | ★★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Strong Prime | Crypto | DLP, CRT | ★☆ |
Web3 | Crypto | Ethereum, ECDLP | ★★ |
Req Bin | Web | Python Format String, Flask | ★☆ |
Generic Flag Checker | Reverse | Signal Handler | ★☆ |
xkcd 835 | Pwn | UAF | ★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
PowerRSA | Crypto | RSA | ★ |
Easy DSA: LCG | Crypto | ECDSA, LCG, LLL | ★★☆ |
Fake Flags | Web | Trolling | ☆ |
Echo | Web | Request Smuggling | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
KVIN | Web/Misc | JavaScript | ★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Poly RSA | Crypto | RSA, GCD | ★★ |
Old School | Web | Bash, CGI | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Vault | Web | XSS, Cache | ★★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Integrity | Crypto | CRT-RSA, Coppersmith | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Encrypted Command Executor | Crypto | ECB | ★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
You can't reverse me | Misc/Reverse | Hook | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Safe Pickle | Misc | Pickle | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Leet Universe | Crypto | Math | ★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Three Pieces | Crypto | Math | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Flag Server | Web | HTTP Cookie | ★★☆ |
FLT-1337 | Misc | Sage Trivia | ☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
readme3 | Web | HTTP, Bun | ★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
MDLP | Crypto | DLP, LLL | ★★ |
MDLP v2 | Crypto | Coppersmith | ★★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
JeetQode | Misc | PPC, JQ | ★☆ |
B64DLE | Misc | AES-CTR, Pickle, Python Format String | ★★☆ |
SC | Crypto | Classic | ☆ |
Fast Cipher | Crypto | Modular Arithmetic | ☆ |
shamiko | Crypto | SHA1 Collision, DSA | ★☆ |
Really Strange orAcle | Crypto | GCD, Binomial Theorem | ★☆ |
pettan | Crypto | RSA Small Message, MT19937, Related Message | ★★☆ |
pekobot | Crypto | Invalid Curve Attack | ★★★ |
Flag Checker | Reverse | ROP, Pickle, Single Prime RSA | ★★ |
Private Browsing | Web | SSRF, Redis, PHP Deserialization | ★★ |
UTF-8 Editor | Pwn | C++, std::vector, OOB, GOT overwrite | ★★ |
SAAS | Pwn | C++, Copy Constructor, UAF | ★★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
ECC | Crypto | ECC | ★ |
Not Wiener | Crypto | RSA, Coppersmith | ★★ |
Media Server | Misc | Python http, procfs | ★★ |
Gitly | Web | 0day | ★ |
Password Generator | Pwn | Math, ROP | ★☆ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Shamiko no fukushuu | Crypto | ECDSA, Hmac collision | ★ |
onelinecrypto | Crypto | RSA, LSB | ★ |
NotLFSR | Crypto | LFSR | ★☆ |
magicRSA | Crypto | RSA | ★☆ |
Neo RSA | Crypto | RSA, coppersmith | ★★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
Baby Side Channel Attack | Crypto | SCA, RSA | ★ |
Baby ECDLP | Crypto | Math, ECDLP | ★☆ |
Baby XOR | Crypto | Linear Algebra, LLL | ★★★ |
Internal | Web | Nginx, CRLF Injection | ★ |
Name | Category | Tags | Difficulty |
---|---|---|---|
A complex number | Crypto | LLL | ★★★ |