ctf-challenges - ✍️ All of the challenges I have written for CTFs

项目说明

CTF

A collection of all of the CTF challenges I ha for CTFs hosted by ISSS, CTFs hosted by UTC, and the CTF final(s) for the CS361 class that I TA'd for.

Stats

119 Problems

61 Unique Problems

6 Problem Categories

Table of Contents

In reverse chronological order by semester

Spring 2021

<details>
<summary>37 Problems</summary>

#### CTF 6 (RobopocalypseCTF)
- [DH-9000 [crypto]](/2021-spring/ctf6-robopocalypseCTF/crypto-diffie-hellman): Diffie-Hellman Brute Force
- [Mightier Than The XORd [crypto]](/2021-spring/ctf6-robopocalypseCTF/crypto-repeated-xor): Repeating XOR
- [Covert Communication [forensics]](/2021-spring/ctf6-robopocalypseCTF/forensics-image-diff): Image Diff
- [Documented [forensics]](/2021-spring/ctf6-robopocalypseCTF/forensics-word-doc): Hiding Files in .docx

#### CTF 7 (StonksCTF)
- [Sandwiched [forensics]](/2021-spring/ctf7-stonksCTF/forensics-embedded-file): File Carving
- [Song of Flags [forensics]](/2021-spring/ctf7-stonksCTF/forensics-musical-cryptogram): Musical Cryptogram
- [Unpleasant or Contemptable Person [web]](/2021-spring/ctf7-stonksCTF/web-git-history): Exposed .git Directory

#### CTF 8 (GalacticBattleCTF)
- [Secret Transmission [crypto]](/2021-spring/ctf8-galacticBattleCTF/crypto-affine): Affine Cipher
- [File Stowaway [forensics]](/2021-spring/ctf8-galacticBattleCTF/forensics-pdf-js): Ja in PDF
- [Following Protocol [misc]](/2021-spring/ctf8-galacticBattleCTF/misc-ports): Port Numbers
- [Key Finding [misc]](/2021-spring/ctf8-galacticBattleCTF/misc-ssh-key): SSH Identicon Reverse Engineering (Drunken Bishop)
- [Quick Maths [re]](/2021-spring/ctf8-galacticBattleCTF/re): Addition and Subtraction Re

#### CTF 9 (FlagCTF)
- [Inconspicuous Image [forensics]](/2021-spring/ctf9-flagCTF/forensics-gifar): GIFAR
- [Bookkeeping [misc]](/2021-spring/ctf9-flagCTF/misc-isbn): ISBN Check Digit Automation

#### UTCTF 2021
- [Sizzling Bacon [beginner]](/2021-spring/utctf/beginner-baconian-cipher): Baconian Cipher
- [Cipher Gauntlet [beginner]](/2021-spring/utctf/beginner-cipher-gauntlet): Binary, Base64, Caesar Cipher
- [Run-ELF [beginner]](/2021-spring/utctf/beginner-run-binary): Run Linux Binary
- [Strings [beginner]](/2021-spring/utctf/beginner-strings): Strings on a Binary
- [HTML [beginner]](/2021-spring/utctf/beginner-): View Source on Website
- [Magic Bytes [beginner]](/2021-spring/utctf/beginner-wrong-file-type): Wrong File Header
- [Small P Problems [crypto]](/2021-spring/utctf/crypto-diffie-hellman-brute-force): Diffie-Hellman Brute Force
- [Wiesner's Quantum Bank [crypto]](/2021-spring/utctf/crypto-quantum-money): Elitzur- Bomb Attack on Wiesner's Quantum Money Scheme
- [SHIFT [forensics]](/2021-spring/utctf/forensics-shifted-image): Image with Shifted Pixels
- [Farmers Only [misc]](/2021-spring/utctf/misc-chaffing-and-winnowing): Chaffing and Winnowing

#### Fore
- [All Your Base Are Belong To Us [crypto]](/2021-spring/fore/crypto-base64): Base64
- [Zeros and Ones [crypto]](/2021-spring/fore/crypto-binary): Binary
- [Bookworm [crypto]](/2021-spring/fore/crypto-book-cipher): Book Cipher (Chapter, Paragraph, Word, Letter)
- [All Greek To Me [crypto]](/2021-spring/fore/crypto-caesar-cipher): Caesar Cipher
- [DEADBEEF [crypto]](/2021-spring/fore/crypto-hex): Hexadecimal
- [OTP [crypto]](/2021-spring/fore/crypto-one-time-pad): One Time Pad Key Reuse
- [Met A Data [forensics]](/2021-spring/fore/forensics-exif-data): EXIF Data/Strings
- [Magic [forensics]](/2021-spring/fore/forensics-file-signature): Wrong File Header
- [Redacted [forensics]](/2021-spring/fore/forensics-pdf-censorship): Redacted PDF
- [Zipped [forensics]](/2021-spring/fore/forensics-zip-cracking): ZIP Cracking
- [Uncharted [misc]](/2021-spring/fore/misc-map): Plotting Coordinates on a Map
- [Nothing In Between [misc]](/2021-spring/fore/misc-zero-width-characters): Zero Width Characters (as binary)
- [Intro to CyberChef [tools]](/2021-spring/fore/tools-cyberchef): How to use CyberChef

</details>

Fall 2020

<details>
<summary>22 Problems</summary>

#### CTF 1 (IntroCTF)
- [The Die Has Been Cast [crypto]](/2020-fall/ctf1-introctf/crypto-caesar-cipher): Caesar Cipher
- [Substitution [crypto]](/2020-fall/ctf1-introctf/crypto-custom-sub-cipher): Emoji Substitution Cipher
- [Redacted [forensics]](/2020-fall/ctf1-introctf/forensics-redacted): Redacted PDF
- [Corrupted [forensics]](/2020-fall/ctf1-introctf/forensics-wrong-file-header): Wrong File Header

#### CTF 2 (TetrisCTF)
- [\#1 Opener [crypto]](/2020-fall/ctf2-tetrisctf/crypto-pigpen): Pigpen Cipher
- [Wumbo [forensics]](/2020-fall/ctf2-tetrisctf/forensics-pdf): PDF CropBox
- [Orange Ricky [forensics]](/2020-fall/ctf2-tetrisctf/forensics-steg): Image Steganography
- [Garbage [forensics]](/2020-fall/ctf2-tetrisctf/forensics-strings): EXIF Data/Strings

#### CTF 3 (AmongUsCTF)
- [Sharing Secrets [crypto]](/2020-fall/ctf3-amongusctf/crypto-shamir-secret-sharing): Shamir's Secret Sharing
- [ Cipher [crypto]](/2020-fall/ctf3-amongusctf/crypto-): Cipher
- [Click Clack Moo [forensics]](/2020-fall/ctf3-amongusctf/forensics-keyboard): Ja Keyboard Codes
- [Live Más [misc]](/2020-fall/ctf3-amongusctf/misc-taco-bell): Luhn Algorithm

#### CTF 4 (SpookyCTF)
- [Dahdit [crypto]](/2020-fall/ctf4-spookyctf/crypto-morse): Morse Code
- [Pontifex [crypto]](/2020-fall/ctf4-spookyctf/crypto-solitaire): Solitaire Cipher
- [Skeleton Wars [forensics]](/2020-fall/ctf4-spookyctf/forensics-alpha-channel): Hidden Alpha Channel
- [Unzipped [forensics]](/2020-fall/ctf4-spookyctf/forensics-zip-cracking): ZIP Cracking
- [Poltergeist [misc]](/2020-fall/ctf4-spookyctf/misc-whitespace): Whitespace

#### Security Day 2020
- [ZigZag [crypto]](/2020-fall/security-day/crypto-railfence): Railfence Cipher
- [Pontifex [crypto]](/2020-fall/security-day/crypto-solitaire): Solitaire Cipher
- [True Hacker [forensics]](/2020-fall/security-day/forensics-jpeg-comment): EXIF Data/Strings
- [SHIFT [forensics]](/2020-fall/security-day/forensics-shifted-image): Image with Shifted Pixels
- [This is the flag [misc]](/2020-fall/security-day/misc-zero-width-character): Adding Extra Zero Width Characters

</details>

Spring 2020

<details>
<summary>7 Problems</summary>

#### CTF 3 ()
- [qwerty [crypto]](/2020-spring/ctf3-/crypto-keyboard-shift): Keyboard Shift Cipher

#### UTCTF 2020
- [One True Problem [crypto]](/2020-spring/utctf/crypto-otp): One Time Pad Key Reuse
- [Cube Crypto [crypto]](/2020-spring/utctf/crypto-rubik-non-commutative): Anshel-Anshel-Goldfeld Encryption using the Rubik's Cube Group
- [Cur [crypto]](/2020-spring/utctf/crypto-shamir-secret-sharing): Shamir Secret Sharing
- [The Legend of Hackerman, Pt. 1 [forensics]](/2020-spring/utctf/forensics-file-header): Wrong File Header
- [The Legend of Hackerman, Pt. 2 [forensics]](/2020-spring/utctf/forensics-docx): Hiding Files in .docx
- [Spectre [forensics]](/2020-spring/utctf/forensics-spectrogram): Spectrogram
</details>

Fall 2019

<details>
<summary>14 Problems</summary>

#### CTF 1 (BepisCTF)
- [Sbubby [crypto]](/2019-fall/ctf1-bepisctf/crypto-sbubby): Substitution Cipher
- [Cat.jpg [forensics]](/2019-fall/ctf1-bepisctf/forensics-catjpg): EXIF Data/Strings
- [Delicious Dinner [forensics]](/2019-fall/ctf1-bepisctf/forensics-delicious-dinner): Wrong File Extension
- [Donkin Dunnts [forensics]](/2019-fall/ctf1-bepisctf/forensics-donkin-dunnts): Image Steganography

#### CTF 2 (ThankfulCTF)
- [SSH ASCII Art [forensics]](/2019-fall/ctf2-thankfulctf/forensics-ssh-ascii-art): SSH Identicon Reverse Engineering (Drunken Bishop)
- [T9 [misc]](/2019-fall/ctf2-thankfulctf/misc-t9): T9 Encoding

#### HackTXCTF 2019
- [Spectrogram [forensics]](/2019-fall/hacktxctf/forensics-spectrogram): Spectrogram
- [ZIP Password [forensics]](/2019-fall/hacktxctf/forensics-zip-password): ZIP Password Cracking
- [USB Capture [networking]](/2019-fall/hacktxctf/networking-usb-capture): Reco From USB Packet Capture

#### Security Day 2019
- [Le Monke [forensics]](/2019-fall/security-day/forensics-le-monke): Binary Representation Of Letters As A Glyph
- [ZIP [forensics]](/2019-fall/security-day/forensics-zip): GIFAR

#### UTC CTF 2019
- [OTP [crypto]](/2019-fall/utc-ctf/crypto-otp): One Time Pad Key Reuse
- [ASC-Key Art [forensics]](/2019-fall/utc-ctf/forensics-ssh-ascii-art): SSH Identicon Reverse Engineering (Drunken Bishop)
- [Really Good :B:icture [misc]](/2019-fall/utc-ctf/misc-hex-colors): Hex Colors to ASCII
</details>

Spring 2019

<details>
<summary>26 Problems</summary>

#### CS361 Final
- [Fence [crypto]](/2019-spring/cs361-final/crypto-fence): Rail Fence Cipher
- [Morse [crypto]](/2019-spring/cs361-final/crypto-morse): Morse Code Audio
- [XOR [crypto]](/2019-spring/cs361-final/crypto-xor): Repeating XOR
- [Audio Steg [forensics]](/2019-spring/cs361-final/forensics-audio-steg): Spectrogram
- [GIFAR [forensics]](/2019-spring/cs361-final/forensics-GIFAR): GIFAR
- [Not The Flag [misc]](/2019-spring/cs361-final/misc-not-the-flag): Zero Width Characters (as binary)

#### CS361 Practice
- [OTP [crypto]](/2019-spring/cs361-practice/crypto-otp): One Time Pad Key Reuse
- [Sub Cipher [crypto]](/2019-spring/cs361-practice/crypto-sub-cipher): Substitution Cipher
- [Steg [forensics]](/2019-spring/cs361-practice/forensics-steg): Image Steganography
- [Whitespace [forensics]](/2019-spring/cs361-practice/forensics-whitespace): Whitespace
- [Ports [misc]](/2019-spring/cs361-practice/misc-ports): Port Numbers
- [Zero Width [misc]](/2019-spring/cs361-practice/misc-zero-width): Adding Extra Zero Width Characters

#### CTF 5 (PixarCTF)
- [Finding Nemo [forensics]](/2019-spring/ctf5-pixar/forensics-finding-nemo): ZIP Password Cracking & Zero Width Fingerprinting
- [You've Got A Flag In Me [forensics]](/2019-spring/ctf5-pixar/forensics-you'): GIFAR

#### CTF 6 (DreamworksCTF)
- [Candide [crypto]](/2019-spring/ctf6-dreamworks/crypto-candide): Book Cipher (Chapter, Paragraph, Word, Letter)
- [Whitespace [forensics]](/2019-spring/ctf6-dreamworks/forensics-whitespace): Whitespace

#### CTF 7 (Mar)
- [Morse [crypto]](/2019-spring/ctf7-mar): Morse Code (that looks like binary)
- [Steg [forensics]](/2019-spring/ctf7-mar): Image Steganography (hidden in red channel of pixel 0, green channel of pixel 1, blue channel of pixel 2, etc.)
- [Deseret [misc]](/2019-spring/ctf7-mar): Deseret Alphabet

#### Security Day 2019
- [Rubikstega [crypto]](/2019-spring/security-day/crypto-rubikstega): Rubik's Cube Based Steganography (it was broken this time, re for UTCTF)
- [Peter Pan [forensics]](/2019-spring/security-day/crypto-peter-pan): Semicolon/Greek Question Mark Binary

#### UTCTF 2019
- [Scrambled [crypto]](/2019-spring/utctf/crypto-scrambled): Rubik's Cube Based Steganography
- [Tale of Two Cities [crypto]](/2019-spring/utctf/crypto-tale-of-two-cities): Shift Cipher with OEIS Sequence
- [Low Sodium Bagel [forensics]](/2019-spring/utctf/forensics-low-sodium-bagel): Image Steganography
- [RIP [forensics]](/2019-spring/utctf/forensics-rip): ZIP Password Cracking
- [DragonScim 2 [recon]](/2019-spring/utctf/recon-dragonscim-2): Reconaissance
</details>

Fall 2018

<details>
<summary>13 Problems</summary>

#### CTF 1
- [Acting Shifty [crypto]](/2018-fall/ctf1/crypto-acting-shifty): Cipher
- [Keep It Zipped [forensics]](/2018-fall/ctf1/forensics-keep-it-zipped): ZIP Password Cracking

#### CTF 2 (Rick and Morty CTF)
- [MT [crypto]](/2018-fall/ctf2-rick-and-morty/crypto-mt): One Time Pad (OTP) Key Reuse
- [Get Wa]](/2018-fall/ctf2-rick-and-morty/forensics-get-wavy): Spectrogram

#### CTF 3 (uwuCTF)
- [Easy RSA [crypto]](/2018-fall/ctf3-uwuctf/crypto-easy-rsa): RSA
- [Stwing [forensics]](/2018-fall/ctf3-uwuctf/forensics-stwing): EXIF Data/Strings
- [Whitespace [forensics]](/2018-fall/ctf3-uwuctf/forensics-whitespace): Whitespace

#### CTF 4 (FortniteCTF)
- [Substitution [crypto]](/2018-fall/ctf4-fortnitectf/crypto-substitution): Emoji Substitution Cipher
- [GIFAR [forensics]](/2018-fall/ctf4-fortnitectf/forensics-gifar): GIFAR

#### HackTXCTF 2018
- [Salad [crypto]](/2018-fall/hacktxctf/crypto-salad): Caesar Cipher
- [Artist [forensics]](/2018-fall/hacktxctf/forensics-artist): Wrong File Header
- [I Love It [forensics]](/2018-fall/hacktxctf/forensics-i-love-it): Morse Code Audio
- [LFSR [misc]](/2018-fall/hacktxctf/misc-lfsr): Linear Feedback Shift Register
</details>

项目信息

开发语言：Python

Star 数：66

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕✍️ All of the challenges I have written for CTFs展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。