Deploy the target OVA in VirtualBox and configure the attacker environment using Kali Linux on the same internal network segment. After booting, identify the target's assigned IP through network scanning: arp-scan -l Once the target is identified (e.g., 10.0.2.15), perform aggressive service enumera...
Examination of the source code reveals a Flask application exposing a deserialization endpoint vulnerable to remote code execution. The application restricts specific modules and filters payload content, requiring a customized approach to bypass security controls. import builtins import io import sy...
Challenge 2-1: Million Bounty Problem Description: An encrypted file contains experimental data. The encryption process involves two steps: Caesar cipher with an unknown shift (1–10, applied only to letters). Rail fence cipher with an unknown key (2–4), using a W-shaped (zigzag) reading pattern and...
Challenge Overview Source: BUUCTF Platform Objective: Retrieve the flag value. Approach The challenge presents a web page with minimal visible content. The URL contains a query parameter ?id=1, indicating this is a standard SQL injection vulnerability. Determining Injection Type First, test whether...
[CISCN 2021 Preliimnary] babybc This challenge provdies a 64-bit ELF binary obfuscated with LLVM control-flow flattening, distributed as a BC LLVM IR file. Reverse engineering reveals the core problem is a constrained 5x5 sudoku puzzle, with custom order constraints encoded in two matrices, which ca...