picoCTF 2019
picoCTF2019 was a two-week long CyberSecurity challenge created by security experts at Carnegie Mellon University. The 2019 competition was held between September 27, 2019 and October 11, 2019. My Team AeroCoders secured Global Rank 189 in the competition.
Show some ❤️ and star the repo to support the efforts
These flags may not work for you as everyone gets unique flags on most problems.
Flags Found
| Problem Title | Category | Points | Flag |
|---|---|---|---|
| The Factory's Secret | General Skills | 1 | picoCTF{zerozerozerozero} |
| 2Warm | General Skills | 50 | picoCTF{101010} |
| Lets Warm Up | General Skills | 50 | picoCTF{p} |
| Warmed Up | General Skills | 50 | picoCTF{61} |
| Bases | General Skills | 100 | picoCTF{l3arn_th3_r0p35} |
| First Grep | General Skills | 100 | picoCTF{grep_is_good_to_find_things_737a3686} |
| Resources | General Skills | 100 | picoCTF{r3source_pag3_f1ag} |
| strings it | General Skills | 100 | |
| what's a net cat? | General Skills | 100 | |
| Based | General Skills | 200 | picoCTF{learning_about_converting_values_0df4252d} |
| First Grep: Part II | General Skills | 200 | |
| plumbing | General Skills | 200 | picoCTF{digital_plumb3r_931b2271} |
| whats-the-difference | General Skills | 200 | picoCTF{th3yr3_a5_d1ff3r3nt_4s_bu773r_4nd_j311y_aslkjfdsalkfslkflkjdsfdszmz10548} |
| where-is-the-file | General Skills | 200 | |
| flag_shop | General Skills | 300 | picoCTF{m0n3y_bag5_b9f469b5} |
| mus1c | General Skills | 300 | picoCTF{rrrocknrn0113r} |
| 1_wanna_b3_a_r0ck5tar | General Skills | 350 | picoCTF{BONJOVI} |
| B1g_Mac | Forensics | ||
| c0rrupt | Forensics | 250 | |
| extensions | Forensics | 150 | picoCTF{now_you_know_about_extensions} |
| Glory of the Garden | Forensics | 50 | picoCTF{more_than_m33ts_the_3y3b7FBD20b} |
| investigation_encoded_1 | Forensics | picoCTF{encodedgxmurhtuou} |
|
| investigation_encoded_2 | Forensics | picoCTF{t1m3f1i3500000000000501af001} |
|
| Investigative Reversing 0 | Forensics | 300 | picoCTF{f0und_1t_eeaec48b} |
| Investigative Reversing 1 | Forensics | picoCTF{An0tha_1_b179115e} |
|
| Investigative Reversing 2 | Forensics | picoCTF{n3xt_0n30000000000000000000000000f69eb8c8} |
|
| Investigative Reversing 3 | Forensics | picoCTF{4n0th3r_L5b_pr0bl3m_0000000000000aa9faea3} |
|
| Investigative Reversing 4 | Forensics | picoCTF{N1c3_R3ver51ng_5k1115_00000000000ade0499b} |
|
| like1000 | Forensics | 250 | picoCTF{l0t5_0f_TAR5} |
| m00nwalk | Forensics | 250 | picoCTF{beep_boop_im_in_space} |
| m00nwalk2 | Forensics | 300 | picoCTF{the_answer_lies_hidden_in_plain_sight} |
| pastaAAA | Forensics | picoCTF{pa$ta_1s_lyf3} |
|
| shark on wire 1 | Forensics | 150 | picoCTF{StaT31355_636f6e6e} |
| shark on wire 2 | Forensics | 300 | |
| So Meta | Forensics | 150 | picoCTF{s0_m3ta_368a0341} |
| unzip | Forensics | 50 | picoCTF{unz1pp1ng_1s_3a5y} |
| WebNet0 | Forensics | ||
| WebNet1 | Forensics | ||
| What Lies Within | Forensics | 150 | picoCTF{h1d1ng_1n_th3_b1t5} |
| WhitePages | Forensics | 250 | picoCTF{not_all_spaces_are_created_equal_3bf40b869ee984866e67f3057f006a92} |
| 13 | Cryptography | 100 | picoCTF{not_too_bad_of_a_problem} |
| AES-ABC | Cryptography | 400 | picoCTF{d0Nt_r0ll_yoUr_0wN_aES} |
| B00tL3g RSA | Cryptography | permanently disabled |
|
| b00tl3gRSA2 | Cryptography | 400 | picoCTF{bad_1d3a5_3778907} |
| b00tl3gRSA3 | Cryptography | 450 | picoCTF{too_many_fact0rs_7187489} |
| caesar | Cryptography | 100 | picoCTF{crossingtherubiconojovpqjs} |
| Easy1 | Cryptography | 100 | picoCTF{CRYPTOISFUN} |
| Flags | Cryptography | 200 | PICOCTF{FLAGSANDSTUFF} |
| john_pollard | Cryptography | 500 | picoCTF{73176001,67867967} |
| la cifra de | Cryptography | 200 | picoCTF{b311a50_0r_v1gn3r3_c1ph3r54ddc1b9} |
| miniRSA | Cryptography | 300 | picoCTF{n33d_a_lArg3r_e_1dcea0a2} |
| Mr-Worldwide | Cryptography | 200 | picoCTF{KODIAK_ALASKA} |
| rsa-pop-quiz | Cryptography | 200 | picoCTF{wA8_th4t$_ill3aGal..o1c355060} |
| Tapping | Cryptography | 200 | picoCTF{M0RS3C0D31SFUN3960854397} |
| The Numbers | Cryptography | 50 | PICOCTF{THENUMBERSMASON} |
| waves over lambda | Cryptography | 300 | |
| cereal hacker 1 | Web Exploitation | 450 | picoCTF{2eb6a9439bfa7cb1fc489b237de59dbf} |
| cereal hacker 2 | Web Exploitation | picoCTF{c9f6ad462c6bb64a53c6e7a6452a6eb7} |
|
| Client-side-again | Web Exploitation | 200 | picoCTF{not_this_again_055670} |
| dont-use-client-side | Web Exploitation | 100 | picoCTF{no_clients_plz_a67772} |
| Empire1 | Web Exploitation | 400 | picoCTF{wh00t_it_a_sql_injecta4dfbd62} |
| Empire2 | Web Exploitation | 450 | picoCTF{its_a_me_your_flag3f43252e} |
| Empire3 | Web Exploitation | 500 | picoCTF{cookies_are_a_sometimes_food_404e643b} |
| GLHF | Web Exploitation | permanently disabled |
|
| Insp3ct0r | Web Exploitation | 50 | picoCTF{tru3_d3t3ct1ve_0r_ju5t_lucky?9df7e69a} |
| Irish-Name-Repo 1 | Web Exploitation | 300 | picoCTF{s0m3_SQL_0397f20c} |
| Irish-Name-Repo 2 | Web Exploitation | 350 | picoCTF{m0R3_SQL_plz_3693681d} |
| Irish-Name-Repo 3 | Web Exploitation | 400 | picoCTF{3v3n_m0r3_SQL_d490b67d} |
| JaWT Scratchpad | Web Exploitation | 400 | picoCTF{jawt_was_just_what_you_thought_9de8e25511a8841ab9ade0aa092be116} |
| logon | Web Exploitation | 100 | picoCTF{th3_c0nsp1r4cy_l1v3s_3294afa0} |
| Open-to-admins | Web Exploitation | 200 | picoCTF{0p3n_t0_adm1n5_effb525e} |
| picobrowser | Web Exploitation | 200 | picoCTF{p1c0_s3cr3t_ag3nt_7e9c671a} |
| where are the robots | Web Exploitation | 100 | picoCTF{ca1cu1at1ng_Mach1n3s_54e98} |
| Java Script Kiddie | Web Exploitation | 400 | picoCTF{905765bf9ae368ad98261c10914d894e} |
| Java Script Kiddie 2 | Web Exploitation | 450 | picoCTF{f1ee7ff44419a675d1a0f0a1a91dff4c} |
| AfterLife | Binary Exploitation | 400 | picoCTF{what5_Aft3r_d2d97c7b} |
| CanaRy | Binary Exploitation | 300 | picoCTF{cAnAr135_mU5t_b3_r4nd0m!_0bd260ce} |
| Ghost_Diary | Binary Exploitation | 500 | |
| GoT | Binary Exploitation | 350 | picoCTF{A_s0ng_0f_1C3_and_f1r3_db12a9ed} |
| handy-shellcode | Binary Exploitation | 50 | picoCTF{h4ndY_d4ndY_sh311c0d3_55c521fe} |
| Heap overflow | Binary Exploitation | 450 | picoCTF{a_s1mpl3_h3ap_69424381} |
| L1im1tL355 | Binary Exploitation | 400 | picoCTF{str1nG_CH3353_295c8b0f} |
| leap-frog | Binary Exploitation | 300 | picoCTF{h0p_r0p_t0p_y0uR_w4y_t0_v1ct0rY_f60266f9} |
| messy-malloc | Binary Exploitation | 300 | picoCTF{g0ttA_cl3aR_y0uR_m4110c3d_m3m0rY_8aa9bc45} |
| NewOverFlow-1 | Binary Exploitation | 200 | picoCTF{th4t_w4snt_t00_d1ff3r3nt_r1ghT?_bfd48203} |
| NewOverFlow-2 | Binary Exploitation | 250 | picoCTF{r0p_1t_d0nT_st0p_1t_64362a2b} |
| OverFlow 0 | Binary Exploitation | 100 | picoCTF{3asY_P3a5yd2b59a57} |
| OverFlow 1 | Binary Exploitation | 150 | picoCTF{n0w_w3r3_ChaNg1ng_r3tURn5a1b468a7} |
| OverFlow 2 | Binary Exploitation | 250 | picoCTF{arg5_and_r3turn598632d70} |
| pointy | Binary Exploitation | 350 | picoCTF{g1v1ng_d1R3Ct10n5_16d57b6c} |
| practice-run-1 | Binary Exploitation | 50 | picoCTF{g3t_r3adY_2_r3v3r53} |
| rop32 | Binary Exploitation | 400 | picoCTF{rOp_t0_b1n_sH_dee2e288} |
| rop64 | Binary Exploitation | 400 | picoCTF{rOp_t0_b1n_sH_w1tH_n3w_g4dg3t5_11cdd436} |
| SecondLife | Binary Exploitation | 400 | picoCTF{HeapHeapFlag_d11a9aaf} |
| seed-sPRiNG | Binary Exploitation | 350 | picoCTF{pseudo_random_number_generator_not_so_random_24ce919be49576c7df453a4a3e6fbd40} |
| sice_cream | Binary Exploitation | 500 | flag{th3_r3al_questi0n_is_why_1s_libc_2.23_still_4_th1ng_148c832c} |
| slippery-shellcode | Binary Exploitation | 200 | picoCTF{sl1pp3ry_sh311c0d3_ecc37b22} |
| stringzz | Binary Exploitation | 300 | picoCTF{str1nG_CH3353_b7f47023} |
| zero_to_hero | Binary Exploitation | ||
| asm1 | Reverse Engineering | 200 | picoCTF{0x533} |
| asm2 | Reverse Engineering | 250 | picoCTF{0x89} |
| asm3 | Reverse Engineering | 300 | picoCTF{0x5a7} |
| asm4 | Reverse Engineering | 400 | picoCTF{0x1d8} |
| B1ll_Gat35 | Reverse Engineering | ||
| droids0 | Reverse Engineering | 300 | picoCTF{a.moose.once.bit.my.sister} |
| droids1 | Reverse Engineering | 350 | picoCTF{pining.for.the.fjords} |
| droids2 | Reverse Engineering | 400 | picoCTF{what.is.your.favourite.colour} |
| droids3 | Reverse Engineering | picoCTF{tis.but.a.scratch} |
|
| droids4 | Reverse Engineering | picoCTF{not.particularly.silly} |
|
| Forky | Reverse Engineering | ||
| Need For Speed | Reverse Engineering | 400 | PICOCTF{Good job keeping bus #0d11d09e speeding along!} |
| reverse_cipher | Reverse Engineering | 300 | picoCTF{r3v3rs369806a41} |
| Time's Up | Reverse Engineering | 400 | picoCTF{Gotta go fast. Gotta go FAST. #2d5896e7} |
| vault-door-1 | Reverse Engineering | 100 | picoCTF{d35cr4mbl3_tH3_cH4r4cT3r5_29f5ca} |
| vault-door-2 | Reverse Engineering | 150 | permanently disabled |
| vault-door-3 | Reverse Engineering | 200 | |
| vault-door-4 | Reverse Engineering | 250 | picoCTF{jU5t_4_bUnCh_0f_bYt3s_b9e92f76ac} |
| vault-door-5 | Reverse Engineering | 300 | |
| vault-door-6 | Reverse Engineering | 350 | |
| vault-door-7 | Reverse Engineering | 400 | |
| vault-door-8 | Reverse Engineering | 450 | picoCTF{s0m3_m0r3_b1t_sh1fTiNg_ad0f0c833} |
| vault-door-training | Reverse Engineering | 50 |
Repository Created & Maintained By
Shivam Goyal
Flutter Developer | Network Security | ML Enthusiast | Sophomore | Blogger
Main Collaborators - Team AeroCoders
Utkarsh Mishra (Thapar Institute)
Mankaran Singh (Thapar Institute)
Jaskeerat Singh (Thapar Institute)
Vaibhav Shrotriya (Thapar Institute)
Found this repository useful?
If you found this repository useful, then please consider giving it a ⭐ on Github and sharing it with your friends via social media.
Got any Queries?
If you got any queries or found a bug create a PR or ping me over on hi@shivamgoyal.co
Found me generous?
If you learned even a thing or two and want to thank me, consider buying me a drink 🍺
License
To the extent possible under law, Shivam Goyal has waived all copyright and related or neighboring rights to this work.