Writeups

A collection of some writeups written by TJCSC

Darin Mao

ASIS CTF Finals 2021 - cuuurl

1/7/2022 — 2 minute read

Arbitrary curl to RCE

Darin Mao

TetCTF 2022 - ezflag 2

1/7/2022 — 4 minute read

Simple ROP through a socket

Darin Mao

TetCTF 2022 - magicbox

1/7/2022 — 3 minute read

Reversing a NOR machine

Darin Mao

redpwnCTF 2021 - gelcode-2 (pwn)

7/12/2021 — 2 minute read

Shellcode golfing

Darin Mao

redpwnCTF 2021 - devnull-as-a-service (pwn)

7/12/2021 — 7 minute read

ret2dlresolve on 64-bit binaries with huge pages

Darin Mao

picoMini by redpwn 2021 - Darin's Challenges

6/21/2021 — 8 minute read

Author writeups for picoMini by redpwn

Diana Lin

picoMini by redpwn 2021 - not-crypto (rev)

5/12/2021 — 1 minute read

Writeup for not-crypto (rev)

Diana Lin

picoMini by redpwn 2021 - notepad (web)

5/12/2021 — 3 minute read

Writeup for notepad (web)

Anna Hsu

picoMini by redpwn 2021 - advanced-potion-making (forensics)

5/11/2021 — 1 minute read

Fixing a corrupt PNG file

Anna Hsu

picoMini by redpwn 2021 - login (web)

5/11/2021 — 1 minute read

Client side login seems like a bad idea

Darin Mao

ångstromCTF 2021 - wallstreet (pwn)

4/15/2021 — 2 minute read

An unusual trick for format string exploitation

Darin Mao

ångstromCTF 2021 - Jar/Snake/Ekans

4/15/2021 — 8 minute read

Exploiting heavily restricted pickle deserialization

Darin Mao and Daniel Wang

picoCTF 2021 - BitHug (web)

4/5/2021 — 2 minute read

Exploiting SSRF in a complex web application

Darin Mao

picoCTF 2021 - Stonk Market (pwn)

3/31/2021 — 4 minute read

Tricky format string exploitation

Darin Mao

picoCTF 2021 - Bizz Fuzz (pwn)

3/30/2021 — 2 minute read

Automated analysis of a large binary

Darin Mao

justCTF 2020 - Pinata (pwn)

1/30/2021 — 10 minute read

Blind exploitation of nginx from justCTF 2020

Darin Mao, Saigautam Bonam, and Autin Mitra

TJCSC Winter Contest 2020

12/16/2020 — 14 minute read

Solutions to selected problems from the 2020 Winter Contest

Darin Mao and Stephen Huan

NACTF 2020

11/4/2020 — 2 minute read

Required writeups for winning teams.

Darin Mao

CSAW CTF 2020 Qualifier - blox (rev/pwn)

11/3/2020 — 6 minute read

This was a two-part series from the 2020 CSAW CTF Qualifier involving a small Tetris-like game.

Darin Mao

DamCTF 2020 - guess (pwn)

10/12/2020 — 1 minute read

This is my writeup for the challenge "guess" in the pwn category from OSUSEC's DamCTF 2020.

Darin Mao

CSAW RED 2020 Qualifier (crypto)

9/29/2020 — 2 minute read

Solutions for crypto challenges from the CSAW RED 2020 Qualification Round.

Darin Mao

CSAW RED 2020 Qualifier (misc)

9/29/2020 — 5 minute read

Solutions for misc challenges from the CSAW RED 2020 Qualification Round.

Darin Mao

CSAW RED 2020 Qualifier (web)

9/29/2020 — 1 minute read

Solutions for web challenges from the CSAW RED 2020 Qualification Round.

Darin Mao

CSAW RED 2020 Qualifier (pwn)

9/29/2020 — 6 minute read

Solutions for pwn challenges from the CSAW RED 2020 Qualification Round.

Darin Mao

CSAW RED 2020 Qualifier (rev)

9/29/2020 — 7 minute read

Solutions for rev challenges from the CSAW RED 2020 Qualification Round.