← All posts

Posts tagged #misc

13 posts

writeup

Alpaca CTF 2026: super-short-python-golf

Escape a 6-char Python eval jail by calling help() to enter pydoc's interactive REPL, then importing jail.py as a module to leak ALPACA_FLAG from the DATA section

#ctf #misc #python
+7
writeup

Alpaca CTF 2026: Vending Machine

Exploit Python's list.pop(-1) silent fallback: drain an item's stock so find() returns -1, then pop(-1) retrieves the flag character appended at the end of the stock string

#ctf #misc #python
+4
writeup

2024 Cyber Apocalypse: Stop Drop and Roll

Script game responses to survive The Fray video game challenge

#htb #ctf #misc
+3
writeup

2024 Cyber Apocalypse: Unbreakable

Bypass blacklist filters in Python eval() to read the flag

#htb #ctf #misc
+3
writeup

2024 Cyber Apocalypse: Character

Automate character-by-character flag extraction from server using socket programming

#htb #ctf #misc
+3
writeup

2024 Cyber Apocalypse: Cubicle Riddle

Construct Python bytecode to find min/max values and answer the cube's riddle

#htb #ctf #misc
+3
writeup

2023 Cyber Apocalypse: Hijack

Exploit Python deserialization vulnerabilities in YAML and Pickle

#htb #ctf #misc
+4
writeup

2023 Cyber Apocalypse: Janken

Win 100 rounds of Janken by exploiting logic in string matching

#htb #ctf #misc
+3
writeup

2023 Cyber Apocalypse: Nehebkaus Trap

Exploit Python exec() filter bypass using character encoding

#htb #ctf #misc
+3
writeup

2023 Cyber Apocalypse: Persistence

Automate repeated HTTP requests to extract flag from endpoint

#htb #ctf #misc
+3
writeup

2023 Cyber Apocalypse: Remote Computation

Automate mathematical expression evaluation over TCP socket

#htb #ctf #misc
+3
writeup

2023 Cyber Apocalypse: Restricted

Escape restricted SSH environment using bash profile bypass

#htb #ctf #misc
+3
writeup

2023 Cyber Apocalypse: The Chasm Crossing Conundrum

Solve bridge crossing puzzle using optimal algorithm

#htb #ctf #misc
+3