/my-ctf-challenges

CTF challenges I created 🚩

Primary LanguageJavaScript

My CTF Challenges

A repository for CTF challenges I created. Have fun playing CTFs 😎

ToC

AlpacaHack Round 7 (Web)

An individual competition in 6 hours:
Sun, 30 Nov. 2024, 03:00 UTC — Sun, 30 Nov. 2024, 09:00 UTC

Challenge Category Solved Writeup Keywords
Treasure Hunt web 71 link (ja) URL encoding
minimal-waf web 4 link (ja) XSS
disconnection web 5 TODO browser behavior
disconnection-revenge web 1 TODO browser behavior

SECCON CTF 13 Quals

Sat, 23 Nov. 2024, 05:00 UTC — Sun, 24 Nov. 2024, 05:00 UTC

Challenge Category Solved Difficulty Keywords Co-Author
Trillion Bank web 84 ★ MySQL N/A
self-ssrf web 23 ★★ URL parser, Bun N/A
double-parser web 17 ★★ HTML parser, XSS N/A
pp4 jail 41 ★ JavaScript, prototype pollution N/A
1linepyjail jail 15 ★★ pyjail N/A
Go to Jail jail 6 ★★★ Go, polyglot, code golf N/A
voidbox jail 3 ★★★★★ JavaScript, sandbox escape Satoooon

IERAE CTF 2024

Sat, 21 Sep. 2024, 06:00 UTC — Sun, 22 Sep. 2024, 06:00 UTC

Challenge Category Solved Difficulty Keywords
5 misc 8 ★ Bun
Leak! Leak! Leak! web 3 ★★★★ XS-Leak, CSP

AlpacaHack Round 2 (Web)

An individual competition in 6 hours:
Sun, 01 Sep. 2024, 03:00 UTC — Sun, 01 Sep. 2024, 09:00 UTC

Challenge Category Solved Writeup Keywords
Simple Login web 84 link (ja) SQL injection
Pico Note 1 web 10 link (ja) CSP bypass, JavaScript
CaaS web 13 link (ja) RCE, Perl
Pico Note 2 web 3 link (ja) Import Maps

SECCON CTF 2023 Finals

Sat, 23 Dec. 2023, 01:00 UTC — Sun, 24 Dec. 2023, 09:00 UTC

Challenge Category Solved / 12
(International)		 Solved / 12
(Domestic)		 Difficulty Writeup Keywords
babywaf web 8 4 ★ link WAF bypass
cgi-2023 web 5 2 ★★★ link XS-Leak, subresource integrity
LemonMD web 2 1 ★★★ link Fresh, Islands Architecture
DOMLeakify web 1 0 ★★★★★ link CSS injection on style attributes
whitespace.js misc 2 2 ★★ link JavaScript sandbox

IERAE DAYS CTF 2023

An onsite local event:
Thu, 7 Dec. 2023

Challenge Category Keywords
simple-proxy web request target

SECCON CTF 2023 Quals

Sat, 16 Sept. 2023, 05:00 UTC — Sun, 17 Sept. 2023, 05:00 UTC

Challenge Category Solved / 653 Difficulty Writeup Keywords
blink web 14 ★★ link DOM clobbering
eeeeejs web 12 ★★★ link ejs, XSS puzzle
hidden-note web 1 ★★★★★ link XS-Leak, unstable sort
crabox sandbox 53 ★ link Rust sandbox
node-ppjail sandbox 5 ★★★ link prototype pollution
deno-ppjail sandbox 2 ★★★★ link prototype pollution

SECCON CTF 2022 Finals

Sat, 11 Feb. 2023, 01:00 UTC — Sun, 12 Feb. 2023, 09:00 UTC

Challenge Category Solved / 10
(International)		 Solved / 12
(Domestic)		 Difficulty Writeup Keywords
babybox web 6 4 ★ link prototype pollution
easylfi2 web 10 8 ★ link LFI, curl
MaaS web 3 1 ★★★ link newline normalization, CSP bypass
light-note web 0 0 ★★★ link DOM clobbering, Sanitizer API
dark-note web 0 0 ★★★★ link time-based oracle

SECCON CTF 2022 Quals

Sat, 12 Nov. 2022, 05:00 UTC — Sun, 13 Nov. 2022, 05:00 UTC

Challenge Category Solved / 726 Difficulty Writeup Keywords
skipinx web 102 ★ link query parser
easylfi web 62 ★ link LFI, curl
bffcalc web 41 ★★ link HTTP request splitting
piyosay web 19 ★★★ link Trusted Types, DOMPurify, RegExp
denobox web 1 ★★★★ link prototype pollution, import maps
spanote web 1 ★★★★★ link Chrome, disk cache, bfcache
latexipy misc 8 ★★ link pyjail, magic comment
txtchecker misc 23 ★★ link magic file, ReDoS
noiseccon misc 22 ★★ link Perlin noise

SECCON CTF 2021

Sat, 11 Dec. 2021, 05:00 UTC — Sun, 12 Dec. 2021, 05:00 UTC

Challenge Category Solved / 506 Difficulty Writeup Keywords
Sequence as a Service 1 web 20 ★★ link JavaScript sandbox
Sequence as a Service 2 web 19 ★ link JavaScript sandbox
Cookie Spinner web 7 ★★★ link DOM clobbering
x-note web 3 ★★★★ link XS-Search