AUCTF-2019

Proposed Challenge Types

PWN

---

• BASH Injection (100)
• Super Easy: have c/c++ catch seg with signals and then print the flag (100)
• Python Jail (100)
• Python Jail V2 (250)
• Logical Error Game (250)
• Buffer Overflow Function Execution (250)
• Printf Vulnerability (500)
• Buffer Overflow RCE (500)

Forensics

---

• PDF Redacted String (100)
• Stego Image (100)
• Base64 Stego (100)
• FAT Analysis (250)
• FAT File Recovery (250)
• Audio Stego (250)
• Encrypted Zip File (250)
• Unallocated Space File Carving (500)

Web

---

• Comment / Cookies (100)
• HTACCESS (100)
• SQLi (250)
• Hidden Web (250)
• Follow the Bits (250)

Crypto

---

• Substitution Cipher (100)
• Bacon Cipher (100)
• Morse Code (100)
• Zodiac / Ceasar Cipher (100)
• RSA (250)
• Polyibus Square (250)
• Matrix Cipher (500)
• Enigma (500)

Reverse

---

• INTEL Assembly (100)
• Hard Coded String (100)
• Keygen (250)
• ARM Assembly (250)
• No Debugger (500)

BASH [50 each]

---

• ssh
• hidden file
• file with readable characters
• file with specific parameters (size, readable, not executable etc)
• multi-layer compression
• GREP
• DIF Command
• Login to next with setuid binary
• Unique string
• Logout Instantly

Password Cracking

---

• 6x Rockyoutxt / Dev (100)
• 4x Mask Attack / Brute Force (250)
• 2x Custom profile wordlist (500)