blahajctf-2024-writeups

BlåhajCTF 2024 Writeups

On 23-24 November 2024, I took part in BlåhajCTF 2024 with Craftless, Kerwin and Arik!

Statistics

• Team name: Promise of Dawn
• Day 1 ranking: 15
• Day 2 ranking: 9 (10393 pts)
• Total problems solved: 40
• Small Blåhaj: Acquired

This is a collection of writeups for challenges I solved.

(Most chall files are still available at azazazo/blahajctf-files)

Quotes from the organisers

• “over here you see someone using Ghidra, then someone using IDA free, someone using IDA pro, and then someone using IDA free”
• “oh wow a dotPeek user” (referring to me)

Crypto

• Beginner RSA (Solved by Craftless)
• bytes2long (trivial)
• Hidden in Plain Sight

Pwn

• iamspeed
• Pwn 100, 101 (not solved by me, will attempt later)

Web

(Most web instances are still up as of 24/11/2024 10:10 PM SGT)

• SSTI Golf
• Data Compressor
• BabySQL
• Insecure Content (Solved by Craftless, partial writeup available)

Rev

Forens

• Keylogger

OSINT

• Xiao Ming’s Adventures 2
• Xiao Ming’s Adventures 3 (solved by Arik)

Misc

• Audio File (brr skibidi dop dop dop yes yes)
• Scan Me (my eyes still hurt)

CSIT

• Haj’s Adventure