Menu

Home

Bushwhackers' blog

Bushwhackers' CTF write-ups and stuff

M-Poly-Cipher write-up (Tokyo Westerns CTF 2019)

We are given a binary implementing some cryptographic scheme, a public key, and an encrypted flag. After some reverse engineering in IDA, we could restore the »

Pwning Master of PHP like it's Real Real World CTF

Pwning Master of PHP like it's Real Real World CTF In our previous blog post, my teammate Emil has already published a solution for Master of »

caidanti write-up (Real World CTF 2019 Quals)

Caidanti was a reverse/pwn task with two flags. The task had two binaries - caidanti and caidanti-storage-service, running on Google's Fuchsia operating system, which is »

Master of PHP writeup (Real World CTF 2019)

Another writeup Before continuing, open another solution in a browser tab (yes, we solved the same challenge twice. Well almost). My teammate @paulcher used CVE-2019-5482 to »

printf write-up (Tokyo Westerns CTF 2019)

printf was a pretty typical pwn task: you get binary, libc, network address, and you have to gain an RCE. The vulnerability is an unsafe alloca »