business-ctf-2024 - Business CTF 2024: The Vault官方报告

项目说明

<p align='center'>
<img src='./assets/banner.png' alt="HTB">
</p>

Challenges

| Category | Name | Objective | Difficulty [⭐⭐⭐⭐⭐] |
| -------- | ----------------------------------------------------- | ------------------------------------------------------------- | ----------------------- |
| Re | FlagCasino | Re a rand based flag checker | ⭐|
| Re | SnappedShut | Re a backdoored v8 snapshot | ⭐⭐|
| Re | Don't Panic | Re the use of Rust unwind catching | ⭐⭐|
| Re | TunnelMadness | Solving a 3D maze embedded in a binary | ⭐⭐⭐|
| Re | SatelliteHijack | Re a multi-layered ifunc based backdoor | ⭐⭐⭐⭐|
| Crypto | eXciting Outpost Recon | Recover XOR key gi plaintext | ⭐ |
| Crypto | Living with Elegance | Sol problem based on LWE outputs | ⭐⭐ |
| Crypto | Bloom Bloom | Obtain the key derived from BBS outputs and then SSS | ⭐⭐ |
| Crypto | Not that random | Identify fake outputs from a custom HMAC | ⭐⭐⭐ |
| Crypto | Blessed | Crack EC-PRNG with LLL + Cheat custom ZKP + Rogue Key Attack | ⭐⭐⭐⭐ |
| Blockchain | Recruitment | Interact with the infrastructure and solve the challenge by satisfying transaction constraints. | ⭐ |
| Blockchain | NotADemocraticElection | Common signature forgery attack. | ⭐⭐ |
| Blockchain | MetaVault | Self of smart contracts and how "secrets" can sometimes be hidden in the metadata. | ⭐⭐ |
| Blockchain | Brokenswap | Steal funds from a DEX | ⭐⭐⭐ |
| Cloud | Scurried | | ⭐ |
| Cloud | MetaRooted | | ⭐⭐ |
| Cloud | Protrude | | ⭐⭐ |
| Cloud | CloudOfSmoke | | ⭐⭐⭐ |
| Cloud | Asceticism | | ⭐⭐⭐⭐⭐ |
| Coding | Computational Recruiting | Sort based on parsed data computed with formulas | ⭐ |
| Coding | Bag Secured | Implement an algorithm to solve the knapsack problem | ⭐⭐ |
| Coding | Dynamic Paths | Implement a dynamic programming algorithm to solve the minimum path sum problem | ⭐⭐ |
| Coding | Branching Tactics | Traverse a tree efficiently using binary lifting | ⭐⭐⭐ |
| Coding | Nothing Without A Cost | DP with an optimized divide and conquer approach | ⭐⭐⭐⭐ |
| Forensics | Caving | PowerShell event log analysis | ⭐ |
| Forensics | Silicon Data Sleuthing | OpenWRT firmware analysis | ⭐⭐ |
| Forensics | Tangled Heist | LDAP network traffic analysis | ⭐⭐ |
| Forensics | Mitigation | XZ Backdoor detection and mitigation | ⭐⭐⭐ |
| Forensics | Counter Defensive | Kovter based registry persistence analysis and
| Hardware | It's Oops PM | VHDL backdoor | ⭐ |
| Hardware | Say Cheese! | Camera firmware backdoor | ⭐⭐ |
| Hardware | Six Five O Two | Flashing 6502 CPU | ⭐⭐⭐ |
| Misc | Aptitude Test | Connect to a socket via nc and send answers | ⭐ |
| Misc | Chrono Mind | LM context injection with path-tra, LM code completion RCE. | ⭐⭐ |
| Misc | Hidden Path | Analyse a Ja file to find a backdoor using in characters and use the backdoor for RCE | ⭐⭐ |
| Misc | Locked Away | Simple PyJail, clearing blacklist | ⭐⭐ |
| Misc | Super-Duper Pwn | vm2 bypass js bot | ⭐⭐ |
| Misc | Prison Pipeline | SSRF exfiltrate private NPM registry token, RCE attack | ⭐⭐⭐ |
| Misc | Zephyr | git and sqlite recon | ⭐⭐⭐ |
| Pwn | Regularity | ret2reg to run custom shellcode | ⭐ |
| Pwn | Abyss | Abusing lack of null-byte termination | ⭐⭐ |
| Pwn | No Gadgets | Buffer o with missing gadgets, complicating leaking and exploitation | ⭐⭐ |
| Pwn | Insidious | Cache side-channel attack to leak flag location | ⭐⭐⭐ |
| Pwn | Pyrrhus | V8 UAF | ⭐⭐⭐⭐ |
| Web | Jailbreak | XXE | ⭐ |
| Web | Blueprint Heist | wkhtmltopdf exploit -> LFI -> GraphQL SQLi -> regex bypass -> RCE | ⭐⭐⭐ |
| Web | HTB Proxy | DNS re-binding => HTTP smuggling => command injection | ⭐⭐⭐ |
| Web | Magicom | register_argc_argv manipulation -> DOMXPath PHAR deserialization -> config injection -> command injection | ⭐⭐⭐ |
| Web | OmniWatch | CRLF injection -> header injection -> cache poisoning -> CSRF -> LFI + SQLi -> beat JWT protection | ⭐⭐⭐⭐ |
| Web | SOS or SSO? | VueJS XSS -> OpenID IdP manipulation -> SQLi | ⭐⭐⭐⭐ |

项目信息

开发语言：Python

Star 数：161

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Official writeups for Business CTF 2024: The Vault Of Hope展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。