All-Army CyberStakes 4 Write-ups
Write-ups and Walk-throughs for the challenges in All-Army CyberStakes 4 (AACS 4).
I am accepting Pull Requests. If you have a write-up that you want included (linked), please let me know!
Acknowledgements
I want to directly acknowledge and sincerely thank the Army Cyber Institute (ACI) for putting together this amazing competition and financially supporting it year after year. In particular, I want to recognize the hard work of Roy Ragsdale who was the driving force behind the continuation of All-Army CyberStakes and spent countless hours both championing CTFing as a learning mechanism as well as pouring his sweat and certainly tears into picoCTF platform upgrades (like the on-demand challenges you all know and love). Finally, I want to recognize the amazing work done by GRIMM (all capitals!) - they created some amazing challenges this year and helped make AACS 4 a big success.
Challenges by Category
Binary Exploitation
Total Problems: 11 Total Points: 2475
| Challenge Name | Points | Write-up |
|---|---|---|
| Binary Exploitation 101 | 50 | |
| Your Cup Overfloweth | 75 | |
| Hacker, Scan Thyself | 100 | |
| Serial Killer | 100 | |
| Stack Check Fail Fail | 150 | |
| An Interesting Structure | 250 | |
| Do you C what I C | 250 | |
| Who Does This Belong To | 250 | |
| Party ROPin in the House | 300 | |
| Speed Racer | 450 | |
| Look At The Totem | 500 |
Cryptography
Total Problems: 7 Total Points: 1040
| Challenge Name | Points | Write-up |
|---|---|---|
| Rotate Me | 5 | |
| Really Senseless Admins | 35 | |
| Over Time: Paid | 50 | |
| Speak Plainly | 150 | |
| Headpiece Silver | 200 | |
| We're Related | 250 | |
| Pigeon Holes | 350 |
Forensics
Total Problems: 13 Total Points: 1905
| Challenge Name | Points | Write-up |
|---|---|---|
| Filing Extension | 10 | |
| Bootcamp | 20 | |
| Controlled Access | 50 | |
| Not So Meta | 50 | |
| Boot Master | 75 | |
| Boot Riddle | 100 | |
| That's More Than Enough | 100 | |
| Turtles All the Way Down | 100 | |
| Boot Racer | 150 | |
| Sharing is Caring | 250 | |
| Drill to the Center | 300 | |
| Needle in the Haystack | 300 | |
| Kids on the Block | 400 |
Miscellaneous
Total Problems: 12 Total Points: 1830
| Challenge Name | Points | Write-up |
|---|---|---|
| All Your Base Are Belong to Us | 50 | |
| Move ZIG | 75 | |
| Proxy List | 100 | |
| Can You Look This Over? | 150 | |
| Recovery And IDentification | 150 | |
| I SEe You | 200 | |
| Partition Twice, Recover Once | 250 | |
| PassThis | 250 | |
| Assembly Voyageur | 300 | |
| UNO Reverse Card | 300 |
Reverse Engineering
Total Problems: 11 Total Points: 2125
| Challenge Name | Points | Write-up |
|---|---|---|
| Reverse Engineering 101 | 25 | |
| Lockbox | 50 | |
| National Dex #65 | 100 | |
| Read it and Weep | 100 | |
| What's the Difference? | 100 | |
| Library Card | 150 | |
| Say What? | 200 | |
| C&C Music Factory | 300 | |
| CLRly just a crack-me | 300 | |
| Are You Maching Me | 350 | |
| Into the Metaverse | 450 |
Web Security
Total Problems: 13 Total Points: 1960
| Challenge Name | Points | Write-up |
|---|---|---|
| Out of Site | 5 | |
| More Out of Site | 10 | |
| Most Out of Site | 20 | |
| Let me INNNNNN | 40 | |
| No Escape | 60 | |
| DENIED | 75 | |
| Blame it on the Temp | 150 | |
| The SQL Always Sucks | 150 | |
| Cookie Monster | 200 | |
| I Have Caught You Now | 250 | |
| Extremely Malicious Language | 300 | |
| Who Is That In That Mirror | 300 | |
| FirstFail | 400 |