The second occurence of the Spokane Mayor's Cyber Cup! Here's to another great year :)
Each directory comes with a challenge file, an Info file and a solution file.
For instance, the easy redirect folder has four files:
- flag.py: The web service that gives the flag. In most situations, this will be a text file.
- redirect_fun.py: The web service trying to be exploited.
- Challenge.md: The challenge/s being given to the contestant.
- Solution.md: The solution on how to solve the problem. This is to ensure that the coaches are able to help.
- Info.md: How to use the application/challenge.
Some challenge directories will have multiple challenges in one. For instance, the Forensics and log analysis questions will have multiple challenges per directory. The Challenge.md will have these labeled as seperate challenges and the Solutions file will have multiple answers, each corresponding to the solutions.
The challenges with TBD have not been created yet, but are ideas. Everything else has been created and is in a folder.
At this point, all of the challenges besides Corey's log analysis challenges have been added.
- easy_redirect (Open redirect without restrictions)
- morse_code (Decoding Morse code)
- huffman (from last year, but screwed up. So, we're putting it in again!)
- wildcard_madness(Using only wildcards to do things)
- uaf (use after free vuln)
- pokemon (Integer underflow)
- korean_food (session handling)
- xor (decrypting data using fun properties of xor)
- Diffie Hellman (explain)
- side_channel (Timing based analysis)
- priv_esc (abusing setuid binaries)
- forensics (6)
- basics (4ish) (do not have entries in here...)
- SSH
- show the contents of a file
- Moves directories
- grep
- Library
- log_analysis (5)
- math(3)
- Bowling
- MD5 brute force
- Hamming weights (2)
- first_sqli (basic SQLi and reflected XSS)
- m_zip (directory traversal)
- cesar cipher(Decode cesar cipher encoded text)
- passive (Finding the flag within network packets)
- basic reverse(Finding the flag within a binary)
- admin panel (Source code analysis RCE)
- auth (Basic buffer overflow)
- The Scoreboard directory has information about the scoreboard setup, included the blank CTFd scoreboard.