NAME
l3ak-writeups - how L3ak solved the challenges it wrote up
DESCRIPTION
6 writeups, newest first. Each opens in the pager as its Markdown source; press q there to come back to this page.
WRITEUPS
- DHCPPP
Exploiting ChaCha20-Poly1305 nonce reuse to forge DHCP configuration, poison DNS, and exfiltrate the flag.
Plaid CTF 2024 / DHCPPP (misc & crypto), by Matthias and Suvoni, 2024-04-21.
- Foreign Exchange
Escaping a Python sandbox through Unicode homoglyphs and dunder attribute access.
UofT CTF 2024 / Zero (jail), by Suvoni, 2024-01-14.
- Invitation
Recovering a hidden function name from EVM bytecode via 4-byte function selectors and Function DB.
TCP1PCTF 2023 / Invitation (blockchain), by Rabbitsthecat, 2023-10-15.
- Signed Jeopardy
Exploiting ECDSA nonce reuse on P-521 to recover the private key and forge a valid signature.
NahamConCTF 2023 / Signed Jeopardy (crypto), by Suvoni, 2023-06-17.
- AFSK Me Anything
Decoding an AFSK1200 signal from a WAV file into an APRS encoded flag.
DanteCTF 2023 / Almost Perfect Remote Signing (forensics), by 0x157 and Suvoni, 2023-06-05.
- Nine Circles of GQRX
Extracting a flag over RF via the IQ data waterfall.
DanteCTF 2023 / Imago Qualitatis (forensics), by 0x157 and Suvoni, 2023-06-05.
SEE ALSO
l3ak-team(7), l3ak-contests(7), mdcat(1)