cyber-apocalypse-2025 - Official writeups for Cyber Apocalypse CTF 2025: T

项目说明

<p align='center'>
<img src='assets/banner.png' alt="HTB">
</p>

__Challenges__

| Category | Name | <di="width:760px">Objective</div> | Difficulty [⭐⭐⭐⭐⭐] |
|-|-|-|-|
| Crypto | Kewiri | Questionnaire about finite fields and elliptic curves | ⭐ |
| Crypto | Traces | AES-CTR key/nonce reuse | ⭐ |
| Crypto | Hourcle | AES-CBC-Decrypt Oracle | ⭐⭐ |
| Crypto | Prelim | Basic RSA in the symmetric group | ⭐⭐ |
| Crypto | | Bleichenbacher attack with LLL | ⭐⭐⭐ |
| Crypto | Copperbox | Multi Coppersmith to recover LCG state | ⭐⭐⭐ |
| Crypto | Twin Oracles | Break a BBS PRNG to get access to an RSA location oracle and use it to perform binary search for the flag. | ⭐⭐⭐⭐ |
| Re | SealedRune | base64 and re password | ⭐ |
| Re | EncryptedScroll | Basic string encoding | ⭐ |
| Re | Impossimaze | Re a simple TUI | ⭐⭐ |
| Re | EndlessCycle | rand() obfsucated shellcode | ⭐⭐ |
| Re | Singlestep | Inplace self-decrypting code | ⭐⭐⭐ |
| Re | Gateway | 64/32 bit ELF polyglot | ⭐⭐⭐⭐ |
| Re | Heart Protector | Custom Nim | ⭐⭐⭐⭐ |
| Pwn | Blessing | Abusing scanf to make malloc() fail | ⭐ |
| Pwn | Quack Quack | Leaking canary and ret2win| ⭐ |
| Pwn | Laconic | SROP | ⭐⭐ |
| Pwn | Crossbow | Stack pivot to call mprotect and read second shellcode stage | ⭐⭐ |
| Pwn | Strategist | Heap o and tcache poisoning | ⭐⭐⭐ |
| Pwn | Contractor | Using bad macros usage to leak PIE and bypass the canary, o return address to reach shell function | ⭐⭐⭐ |
| Pwn | Vault | Misuse of snprintf for OOB write, and off by one in a parser. Canary bypass in order to reach a one_gadget | ⭐⭐⭐⭐ |
| Forensics | A New Hire | WebDa analysis, based on | ⭐ |
| Forensics | Thorins Amulet | Obfuscated Powershell | ⭐ |
| Forensics | Stealth In | Chrome Keylogger analysis, | ⭐⭐ |
| Forensics | Silent Trap | Malware Analysis of the OCEANMAP malware | ⭐⭐ |
| Forensics | ToolPie | Malware analysis and traffic decryption based on the malware MASEPIE | ⭐⭐⭐ |
| Forensics | Ca | Obfuscated Powershell | ⭐⭐⭐ |
| Forensics | Tales for the Brave | Ja analysis,
| Web | Whispers of the Moonbeam | command injection | ⭐ |
| Web | Trial by Fire | SSTI | ⭐ |
| Web | Cyber Attack | Code injection through SSRF caused by handler confusion in outdated Apache | ⭐⭐ |
| Web | Eldoria Panel | CSRF on POST endpoint via PHP json bug => DOM purify bypass XSS => Account Takeover => RFI via FTP => RCE | ⭐⭐⭐ |
| Web | Eldoria Realms | Ruby class pollution => Curl gopher SSRF => GRPC protocol => Command injection | ⭐⭐⭐ |
| Web | Aurors Archive | Oauth CSRF -> self XSS via CSTI in vueJS -> Cookie o -> Postgres RCE with only SELECT query | ⭐⭐⭐⭐ |
| Prompt Injection | Cursed GateKeeper | Prompt injection to reveal sensiti with conditional scenarios | ⭐⭐ |
| Prompt Injection | Elixir Emporium | Prompt injection to bypass sensiti filtering | ⭐⭐ |
| Prompt Injection | Embassy | Prompt injection to manipulate AI response | ⭐⭐ |
| Prompt Injection | Mirror Witch | Prompt injection to exfiltrate sensitive list data | ⭐⭐ |
| Prompt Injection | Lunar Orb | Multi-step prompt injection to reveal sensiti | ⭐⭐ |
| Coding | ClockWork Guardian | Computing the shortest safe path in a grid | ⭐ |
| Coding | Dragon Flight | Calculating the maximum subarray sum | ⭐ |
| Coding | Dragon Fury | Choosing the optimal set of elements in a list of arrays | ⭐ |
| Coding | Enchanted Cipher | Writing a shift-based string decoder | ⭐ |
| Coding | Summoners Incantation | Computing the maximum sum of non-adjacent numbers | ⭐ |
| Secure Coding | Lyra's Tavern | Securing against a Juniper CVE | ⭐⭐ |
| Secure Coding | Stoneforge's Domain | Securing against nginx alias path tra | ⭐⭐ |
| Secure Coding | Arcane Auctions | Fix prisma ORM leak | ⭐⭐ |
| OSINT | The Stone That Whispers | Identifying a monument with reverse image search | ⭐ |
| OSINT | Echoes in Stone | Identifying a stone through reverse image search | ⭐ |
| OSINT | The Mechanical Bird's Nest | Locating a on Google Maps | ⭐⭐ |
| OSINT | The Hillside Haven | Locating the address of a pictured house | ⭐⭐ |
| OSINT | The Ancient Citadel | Locating a castle with reverse image search | ⭐⭐ |
| OSINT | The Shadowed Sigil | Use OSINT techniques to in a threat actor's IP | ⭐⭐⭐ |
| OSINT | The Poisoned Scroll | Identify a threat actor through used malware | ⭐⭐⭐ |
| Blockchain | Eldorion | - | ⭐ |
| Blockchain | Eldorion | - | ⭐⭐ |
| Blockchain | Eldorion | - | ⭐⭐⭐ |
| Machine Learning | Enchanted Weights | Extracting a message from a model's weights | ⭐⭐ |
| Machine Learning | Wasteland | Manipulating a dataset without triggering tamper detection | ⭐⭐⭐ |
| Machine Learning | Crystal Corruption | Analyzing malicious behaviour in a model file | ⭐⭐⭐ |
| Machine Learning | Reverse Prompt | Reverse engineering embeddings to a hidden passphrase | ⭐⭐⭐ |
| Machine Learning | Malakar's Deception | Identifying malicious functionality in a model | ⭐⭐⭐⭐ |

项目信息

开发语言：Solidity

Star 数：209

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Official writeups for Cyber Apocalypse CTF 2025: Tales from Eldoria展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。