Misc

Two images XOR together to reveal the hidden content. No flag recorded.

An image upload ran a vulnerable ExifTool, so a crafted file triggered CVE-2021-22204 for code execution.

A pile of Windows .evtx logs and a four-part question set, answered by hunting the events with Chainsaw and the Sigma ruleset.

An “interstellar AI” was told never to name five forbidden planets. Asking in another language and forcing a fixed preamble walked it right past its own guardrail.

The easy-points boxes: a flag sitting in an SNMP sysLocation field, and two backdoor ports that handed out flags over netcat.

A PCAP of an unencrypted session to a Metasploitable box. Following the TCP stream replayed the attacker shell, flag and all.

An image-upload challenge that echoed parsed metadata back. Controlling fields like width and height let us write into the metadata block and reach the flag. Long grind with Kiwi.

A game you had to win to get the flag. We automated it with a play script that won often enough to land the flag on a lucky run.

The TXT record only answered for a trusted source IP. EDNS Client Subnet let us claim to be 127.0.0.1 and the server coughed up the flag.

A Python jail that forgot to block file descriptors; reopen stdout and shell out.