hacktheboo-2024 - Official writeups for Hack The Boo CTF 2024

项目说明

<p align='center'>
<img src='assets/logo_htb.png' alt="HTB">
</p>

__Challenges__

| Category | Name | <di="width:760px">Objective</div> | Difficulty [⭐⭐⭐⭐⭐] |
|---------------|------------------------------------------------------------------------------------------|-------------------------------------------------------------------|-------------------------|
| Crypto | bre | Factor small RSA moduli | ⭐ |
| Crypto | sekur julius | Decrypt twisted of Caesar cipher | ⭐ |
| Crypto | sugar free candies | Sol of 3 given 4 equations | ⭐ |
| Crypto | binary basis | Distinguish 128-bit primes from binary representation and RSA decrypt | ⭐⭐ |
| Crypto | hybrid unifier | Establish a secure session with ser hybrid cryptography | ⭐⭐ |
| Web | waywitch | Client side JWT signing | ⭐ |
| Web | phantom script | Standard XSS | ⭐ |
| Web | unholy union | Union SQL Injection | ⭐ |
| Web | void whispers | Blind Command Injection | ⭐⭐ |
| Forensics | Forbidden Manuscript | Enumerate HTTP stream and hex decode the flag | ⭐ |
| Forensics | Sp00ky Theme | Malicious Plasma 6 plasmoid (widget) that executes rogue commands. | ⭐ |
| Forensics | The Shortcut Haunting | Find the payload embedded in an lnk file and decoding it using base64. | ⭐ |
| Forensics | Foggy Intrusion | Analyze a pcap file containing some HTTP traffic that in a PHP attack (C) in order to obtain the flag. | ⭐⭐ |
| Forensics | Ghostly Persistence | Analyze multiple e searching for powershell executed code in order to obtain the flag. | ⭐⭐ |
| Rev | CryptOfTheUndead | Re Encryption Algorithm | ⭐ |
| Rev | Gra | Using strace + scripting | ⭐ |
| Rev | SpookyPass | Standard strings challenge | ⭐ |
| Rev | LinkHands | Linking two linked lists | ⭐⭐ |
| Rev | Terrorfryer | Leaking PRNG shuffling | ⭐⭐ |
| Pwn | El Teteo | Shellcode execution | ⭐ |
| Pwn | Mathematricks | Integer o | ⭐ |
| Pwn | Que onda | Basic instructions | ⭐ |
| Pwn | El Mundo | Standard ret2win challenge | ⭐⭐ |
| Pwn | El Pipo | Basic Buffer O | ⭐⭐ |
| Coding | addition | Given two numbers, return the sum. | ⭐ |
| Coding | oddly_even | Given a number, print "even" if it is even and "odd" if it is odd. | ⭐ |
| Coding | re | Given a string, return the reverse of the string. | ⭐ |
| Coding | minimax | Find the Smallest and Largest Number | ⭐⭐ |
| Coding | replacement | Given a string, a letter in the string and a random letter, replace all instances of the first letter with the latter. | ⭐⭐ |

项目信息

开发语言：Python

Star 数：56

技术要点

该项目属于CTF思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Official writeups for Hack The Boo CTF 2024展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。