A repository for CTF challenges I created. Have fun playing CTFs 😎
- SECCON CTF 2023 Finals
- SECCON CTF 2023 Quals
- SECCON CTF 2022 Finals
- SECCON CTF 2022 Quals
- SECCON CTF 2021
Sat, 23 Dec. 2023, 01:00 UTC — Sun, 24 Dec. 2023, 09:00 UTC
| Challenge | Category | Solved / 12 (International) |
Solved / 12 (Domestic) |
Difficulty | Writeup | Keywords |
|---|---|---|---|---|---|---|
| babywaf | web | 8 | 4 | ★ | link | WAF bypass |
| cgi-2023 | web | 5 | 2 | ★★★ | link | XS-Leak, subresource integrity |
| LemonMD | web | 2 | 1 | ★★★ | link | Fresh, Islands Architecture |
| DOMLeakify | web | 1 | 0 | ★★★★★ | link | CSS injection on style attributes |
| whitespace.js | misc | 2 | 2 | ★★ | link | JavaScript sandbox |
Sat, 16 Sept. 2023, 05:00 UTC — Sun, 17 Sept. 2023, 05:00 UTC
| Challenge | Category | Solved / 653 | Difficulty | Writeup | Keywords |
|---|---|---|---|---|---|
| blink | web | 14 | ★★ | link | DOM clobbering |
| eeeeejs | web | 12 | ★★★ | link | ejs, XSS puzzle |
| hidden-note | web | 1 | ★★★★★ | link | XS-Leak, unstable sort |
| crabox | sandbox | 53 | ★ | link | Rust sandbox |
| node-ppjail | sandbox | 5 | ★★★ | link | prototype pollution |
| deno-ppjail | sandbox | 2 | ★★★★ | link | prototype pollution |
Sat, 11 Feb. 2023, 01:00 UTC — Sun, 12 Feb. 2023, 09:00 UTC
| Challenge | Category | Solved / 10 (International) |
Solved / 12 (Domestic) |
Difficulty | Writeup | Keywords |
|---|---|---|---|---|---|---|
| babybox | web | 6 | 4 | ★ | link | prototype pollution |
| easylfi2 | web | 10 | 8 | ★ | link | LFI, curl |
| MaaS | web | 3 | 1 | ★★★ | link | newline normalization, CSP bypass |
| light-note | web | 0 | 0 | ★★★ | link | DOM clobbering, Sanitizer API |
| dark-note | web | 0 | 0 | ★★★★ | link | time-based oracle |
Sat, 12 Nov. 2022, 05:00 UTC — Sun, 13 Nov. 2022, 05:00 UTC
| Challenge | Category | Solved / 726 | Difficulty | Writeup | Keywords |
|---|---|---|---|---|---|
| skipinx | web | 102 | ★ | link | query parser |
| easylfi | web | 62 | ★ | link | LFI, curl |
| bffcalc | web | 41 | ★★ | link | HTTP request splitting |
| piyosay | web | 19 | ★★★ | link | Trusted Types, DOMPurify, RegExp |
| denobox | web | 1 | ★★★★ | link | prototype pollution, import maps |
| spanote | web | 1 | ★★★★★ | link | Chrome, disk cache, bfcache |
| latexipy | misc | 8 | ★★ | link | pyjail, magic comment |
| txtchecker | misc | 23 | ★★ | link | magic file, ReDoS |
| noiseccon | misc | 22 | ★★ | link | Perlin noise |
Sat, 11 Dec. 2021, 05:00 UTC — Sun, 12 Dec. 2021, 05:00 UTC
| Challenge | Category | Solved / 506 | Difficulty | Writeup | Keywords |
|---|---|---|---|---|---|
| Sequence as a Service 1 | web | 20 | ★★ | link | JavaScript sandbox |
| Sequence as a Service 2 | web | 19 | ★ | link | JavaScript sandbox |
| Cookie Spinner | web | 7 | ★★★ | link | DOM clobbering |
| x-note | web | 3 | ★★★★ | link | XS-Search |