-
Notifications
You must be signed in to change notification settings - Fork 6
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #34 from square/chaitanyarahalkar/changes-2024-ctf
Add 2024 CTF details
- Loading branch information
Showing
26 changed files
with
1,936 additions
and
28 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,59 @@ | ||
<html lang="en"> | ||
<head> | ||
<title>Square CTF 2024: 2048 ai</title> | ||
<meta charset="utf-8"> | ||
<meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||
<meta name="viewport" content="width=device-width, initial-scale=1"> | ||
|
||
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> | ||
<meta name="og:title" content="Square CTF: hacking competition!"> | ||
<meta name="og:url" content="https://squarectf.com/"> | ||
<meta property="og:type" content="website"> | ||
<meta name="og:description" content="Compete to solve security-related challenges."> | ||
<meta property="og:image" content="../og.png"> | ||
|
||
<meta name="twitter:card" content="summary"> | ||
<meta name="twitter:site" content="@SquareEng"> | ||
<meta name="twitter:title" content="Square CTF: We make security and hacking more approachable — since 2014."> | ||
<meta name="twitter:description" content="Compete to solve security-related challenges."> | ||
<meta name="twitter:image" content="../og.png"> | ||
|
||
<meta name="description" content="Compete to solve security-related challenges."> | ||
<meta name="author" content="Square, Inc."> | ||
<link rel="stylesheet" media="screen" href="../squarectf.css"> | ||
</head> | ||
<body> | ||
<div class="wideline begin"> | ||
<span>C16: 2048 ai(2024)</span> | ||
<span><a href="../index.html"><img src="../sqlogo.svg"></a></span> | ||
<span>C16: 2048 ai(2024})</span> | ||
</div> | ||
|
||
<h1>Name</h1> | ||
<p>C16: 2048 ai</p> | ||
|
||
<h1>Type</h1> | ||
<p>misc</p> | ||
|
||
<h1>Points</h1> | ||
<p>150</p> | ||
|
||
<h1>Description</h1> | ||
<p> | ||
Can you speedrun 2048? | ||
|
||
nc 54.85.45.101 8006<br><br><a href="data/2048-ai.zip">2048-ai.zip</a> | ||
</p> | ||
<h1>See also</h1> | ||
<p> | ||
<a href="https://squ.re/2POCGUK">Work_at_Square(1)</a>, | ||
<a href="https://squareup.com/legal/privacy">Privacy_policy(1)</a>, | ||
<a href="https://squarectf.com/code_of_conduct.html">Code_of_conduct(1)</a> | ||
</p> | ||
<div class="wideline end"> | ||
<span>Square, Inc.</span> | ||
<span>(c) <script>document.write(new Date().toLocaleString("en-us", {month: "long", year: "numeric"}));</script></span> | ||
<span>C16: 2048 ai(2024)</span> | ||
</div> | ||
</body> | ||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,59 @@ | ||
<html lang="en"> | ||
<head> | ||
<title>Square CTF 2024: 2048 hacker 0</title> | ||
<meta charset="utf-8"> | ||
<meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||
<meta name="viewport" content="width=device-width, initial-scale=1"> | ||
|
||
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> | ||
<meta name="og:title" content="Square CTF: hacking competition!"> | ||
<meta name="og:url" content="https://squarectf.com/"> | ||
<meta property="og:type" content="website"> | ||
<meta name="og:description" content="Compete to solve security-related challenges."> | ||
<meta property="og:image" content="../og.png"> | ||
|
||
<meta name="twitter:card" content="summary"> | ||
<meta name="twitter:site" content="@SquareEng"> | ||
<meta name="twitter:title" content="Square CTF: We make security and hacking more approachable — since 2014."> | ||
<meta name="twitter:description" content="Compete to solve security-related challenges."> | ||
<meta name="twitter:image" content="../og.png"> | ||
|
||
<meta name="description" content="Compete to solve security-related challenges."> | ||
<meta name="author" content="Square, Inc."> | ||
<link rel="stylesheet" media="screen" href="../squarectf.css"> | ||
</head> | ||
<body> | ||
<div class="wideline begin"> | ||
<span>C13: 2048 hacker 0(2024)</span> | ||
<span><a href="../index.html"><img src="../sqlogo.svg"></a></span> | ||
<span>C13: 2048 hacker 0(2024})</span> | ||
</div> | ||
|
||
<h1>Name</h1> | ||
<p>C13: 2048 hacker 0</p> | ||
|
||
<h1>Type</h1> | ||
<p>pwn</p> | ||
|
||
<h1>Points</h1> | ||
<p>150</p> | ||
|
||
<h1>Description</h1> | ||
<p> | ||
The game is rigged against you. | ||
|
||
nc 54.85.45.101 8007<br><br><a href="data/2048-hacker-0.zip">2048-hacker-0.zip</a> | ||
</p> | ||
<h1>See also</h1> | ||
<p> | ||
<a href="https://squ.re/2POCGUK">Work_at_Square(1)</a>, | ||
<a href="https://squareup.com/legal/privacy">Privacy_policy(1)</a>, | ||
<a href="https://squarectf.com/code_of_conduct.html">Code_of_conduct(1)</a> | ||
</p> | ||
<div class="wideline end"> | ||
<span>Square, Inc.</span> | ||
<span>(c) <script>document.write(new Date().toLocaleString("en-us", {month: "long", year: "numeric"}));</script></span> | ||
<span>C13: 2048 hacker 0(2024)</span> | ||
</div> | ||
</body> | ||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,59 @@ | ||
<html lang="en"> | ||
<head> | ||
<title>Square CTF 2024: 2048 hacker 1</title> | ||
<meta charset="utf-8"> | ||
<meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||
<meta name="viewport" content="width=device-width, initial-scale=1"> | ||
|
||
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> | ||
<meta name="og:title" content="Square CTF: hacking competition!"> | ||
<meta name="og:url" content="https://squarectf.com/"> | ||
<meta property="og:type" content="website"> | ||
<meta name="og:description" content="Compete to solve security-related challenges."> | ||
<meta property="og:image" content="../og.png"> | ||
|
||
<meta name="twitter:card" content="summary"> | ||
<meta name="twitter:site" content="@SquareEng"> | ||
<meta name="twitter:title" content="Square CTF: We make security and hacking more approachable — since 2014."> | ||
<meta name="twitter:description" content="Compete to solve security-related challenges."> | ||
<meta name="twitter:image" content="../og.png"> | ||
|
||
<meta name="description" content="Compete to solve security-related challenges."> | ||
<meta name="author" content="Square, Inc."> | ||
<link rel="stylesheet" media="screen" href="../squarectf.css"> | ||
</head> | ||
<body> | ||
<div class="wideline begin"> | ||
<span>C15: 2048 hacker 1(2024)</span> | ||
<span><a href="../index.html"><img src="../sqlogo.svg"></a></span> | ||
<span>C15: 2048 hacker 1(2024})</span> | ||
</div> | ||
|
||
<h1>Name</h1> | ||
<p>C15: 2048 hacker 1</p> | ||
|
||
<h1>Type</h1> | ||
<p>pwn</p> | ||
|
||
<h1>Points</h1> | ||
<p>350</p> | ||
|
||
<h1>Description</h1> | ||
<p> | ||
If you solved 2048 hacker 0 you know the game is actually rigged in your favor. Go get a shell! | ||
|
||
nc 54.85.45.101 8007<br><br><a href="data/2048-hacker-1.zip">2048-hacker-1.zip</a> | ||
</p> | ||
<h1>See also</h1> | ||
<p> | ||
<a href="https://squ.re/2POCGUK">Work_at_Square(1)</a>, | ||
<a href="https://squareup.com/legal/privacy">Privacy_policy(1)</a>, | ||
<a href="https://squarectf.com/code_of_conduct.html">Code_of_conduct(1)</a> | ||
</p> | ||
<div class="wideline end"> | ||
<span>Square, Inc.</span> | ||
<span>(c) <script>document.write(new Date().toLocaleString("en-us", {month: "long", year: "numeric"}));</script></span> | ||
<span>C15: 2048 hacker 1(2024)</span> | ||
</div> | ||
</body> | ||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,57 @@ | ||
<html lang="en"> | ||
<head> | ||
<title>Square CTF 2024: An Elf on a Shelf</title> | ||
<meta charset="utf-8"> | ||
<meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||
<meta name="viewport" content="width=device-width, initial-scale=1"> | ||
|
||
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> | ||
<meta name="og:title" content="Square CTF: hacking competition!"> | ||
<meta name="og:url" content="https://squarectf.com/"> | ||
<meta property="og:type" content="website"> | ||
<meta name="og:description" content="Compete to solve security-related challenges."> | ||
<meta property="og:image" content="../og.png"> | ||
|
||
<meta name="twitter:card" content="summary"> | ||
<meta name="twitter:site" content="@SquareEng"> | ||
<meta name="twitter:title" content="Square CTF: We make security and hacking more approachable — since 2014."> | ||
<meta name="twitter:description" content="Compete to solve security-related challenges."> | ||
<meta name="twitter:image" content="../og.png"> | ||
|
||
<meta name="description" content="Compete to solve security-related challenges."> | ||
<meta name="author" content="Square, Inc."> | ||
<link rel="stylesheet" media="screen" href="../squarectf.css"> | ||
</head> | ||
<body> | ||
<div class="wideline begin"> | ||
<span>C6: An Elf on a Shelf(2024)</span> | ||
<span><a href="../index.html"><img src="../sqlogo.svg"></a></span> | ||
<span>C6: An Elf on a Shelf(2024})</span> | ||
</div> | ||
|
||
<h1>Name</h1> | ||
<p>C6: An Elf on a Shelf</p> | ||
|
||
<h1>Type</h1> | ||
<p>reversing</p> | ||
|
||
<h1>Points</h1> | ||
<p>250</p> | ||
|
||
<h1>Description</h1> | ||
<p> | ||
What's going on here?<br><br><a href="data/an-elf-on-a-shelf.zip">an-elf-on-a-shelf.zip</a> | ||
</p> | ||
<h1>See also</h1> | ||
<p> | ||
<a href="https://squ.re/2POCGUK">Work_at_Square(1)</a>, | ||
<a href="https://squareup.com/legal/privacy">Privacy_policy(1)</a>, | ||
<a href="https://squarectf.com/code_of_conduct.html">Code_of_conduct(1)</a> | ||
</p> | ||
<div class="wideline end"> | ||
<span>Square, Inc.</span> | ||
<span>(c) <script>document.write(new Date().toLocaleString("en-us", {month: "long", year: "numeric"}));</script></span> | ||
<span>C6: An Elf on a Shelf(2024)</span> | ||
</div> | ||
</body> | ||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,61 @@ | ||
<html lang="en"> | ||
<head> | ||
<title>Square CTF 2024: Custom Keyboard</title> | ||
<meta charset="utf-8"> | ||
<meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||
<meta name="viewport" content="width=device-width, initial-scale=1"> | ||
|
||
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> | ||
<meta name="og:title" content="Square CTF: hacking competition!"> | ||
<meta name="og:url" content="https://squarectf.com/"> | ||
<meta property="og:type" content="website"> | ||
<meta name="og:description" content="Compete to solve security-related challenges."> | ||
<meta property="og:image" content="../og.png"> | ||
|
||
<meta name="twitter:card" content="summary"> | ||
<meta name="twitter:site" content="@SquareEng"> | ||
<meta name="twitter:title" content="Square CTF: We make security and hacking more approachable — since 2014."> | ||
<meta name="twitter:description" content="Compete to solve security-related challenges."> | ||
<meta name="twitter:image" content="../og.png"> | ||
|
||
<meta name="description" content="Compete to solve security-related challenges."> | ||
<meta name="author" content="Square, Inc."> | ||
<link rel="stylesheet" media="screen" href="../squarectf.css"> | ||
</head> | ||
<body> | ||
<div class="wideline begin"> | ||
<span>C20: Custom Keyboard(2024)</span> | ||
<span><a href="../index.html"><img src="../sqlogo.svg"></a></span> | ||
<span>C20: Custom Keyboard(2024})</span> | ||
</div> | ||
|
||
<h1>Name</h1> | ||
<p>C20: Custom Keyboard</p> | ||
|
||
<h1>Type</h1> | ||
<p>reversing</p> | ||
|
||
<h1>Points</h1> | ||
<p>400</p> | ||
|
||
<h1>Description</h1> | ||
<p> | ||
I got a sweet deal on this keyboard at a garage sale, but I think whoever used it before me messed with the settings. It came with an instruction manual that just says: `KKPE{FJZBSVNBYWWOKOJIPNWGPGASCVVYPAYLAHTX}` | ||
|
||
**NOTE**: The flag will be in ALL CAPS, like `FLAG{...}` | ||
|
||
**NOTE**: The flag was typed continuously 🎹<br><br><a href="data/custom-keyboard.zip">custom-keyboard.zip</a> | ||
</p> | ||
<h1>See also</h1> | ||
<p> | ||
<a href="https://squ.re/2POCGUK">Work_at_Square(1)</a>, | ||
<a href="https://squareup.com/legal/privacy">Privacy_policy(1)</a>, | ||
<a href="https://squarectf.com/code_of_conduct.html">Code_of_conduct(1)</a> | ||
</p> | ||
<div class="wideline end"> | ||
<span>Square, Inc.</span> | ||
<span>(c) <script>document.write(new Date().toLocaleString("en-us", {month: "long", year: "numeric"}));</script></span> | ||
<span>C20: Custom Keyboard(2024)</span> | ||
</div> | ||
</body> | ||
</html> |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,59 @@ | ||
<html lang="en"> | ||
<head> | ||
<title>Square CTF 2024: echo</title> | ||
<meta charset="utf-8"> | ||
<meta http-equiv="X-UA-Compatible" content="IE=edge"> | ||
<meta name="viewport" content="width=device-width, initial-scale=1"> | ||
|
||
<link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> | ||
<meta name="og:title" content="Square CTF: hacking competition!"> | ||
<meta name="og:url" content="https://squarectf.com/"> | ||
<meta property="og:type" content="website"> | ||
<meta name="og:description" content="Compete to solve security-related challenges."> | ||
<meta property="og:image" content="../og.png"> | ||
|
||
<meta name="twitter:card" content="summary"> | ||
<meta name="twitter:site" content="@SquareEng"> | ||
<meta name="twitter:title" content="Square CTF: We make security and hacking more approachable — since 2014."> | ||
<meta name="twitter:description" content="Compete to solve security-related challenges."> | ||
<meta name="twitter:image" content="../og.png"> | ||
|
||
<meta name="description" content="Compete to solve security-related challenges."> | ||
<meta name="author" content="Square, Inc."> | ||
<link rel="stylesheet" media="screen" href="../squarectf.css"> | ||
</head> | ||
<body> | ||
<div class="wideline begin"> | ||
<span>C17: echo(2024)</span> | ||
<span><a href="../index.html"><img src="../sqlogo.svg"></a></span> | ||
<span>C17: echo(2024})</span> | ||
</div> | ||
|
||
<h1>Name</h1> | ||
<p>C17: echo</p> | ||
|
||
<h1>Type</h1> | ||
<p>pwn</p> | ||
|
||
<h1>Points</h1> | ||
<p>25</p> | ||
|
||
<h1>Description</h1> | ||
<p> | ||
This simple server echos back what it hears. Can you make it say so̸met̸hing ḍ̣͂̅i̮̓f̆f̛ḙ̊rḙ̊nt̮̏? | ||
|
||
nc 54.85.45.101 8008<br><br><a href="data/echo.zip">echo.zip</a> | ||
</p> | ||
<h1>See also</h1> | ||
<p> | ||
<a href="https://squ.re/2POCGUK">Work_at_Square(1)</a>, | ||
<a href="https://squareup.com/legal/privacy">Privacy_policy(1)</a>, | ||
<a href="https://squarectf.com/code_of_conduct.html">Code_of_conduct(1)</a> | ||
</p> | ||
<div class="wideline end"> | ||
<span>Square, Inc.</span> | ||
<span>(c) <script>document.write(new Date().toLocaleString("en-us", {month: "long", year: "numeric"}));</script></span> | ||
<span>C17: echo(2024)</span> | ||
</div> | ||
</body> | ||
</html> |
Oops, something went wrong.