Writeups
jeff_160
19 July 2025
SSMCTF 2025
Web Exploitation(Medium)
Solyanka Gallery
Writeup created for the 2025 SSMCTF Writeup Competition
Stucknight
19 July 2025
SSMCTF 2025
Web Exploitation(Hard)
Cinema
Writeup created for the 2025 SSMCTF writeup competition
maximum200
19 July 2025
SSMCTF 2025
Web Exploitation(Easy)
Boy
Created for the 2025 SSMCTF Writeup Competition
maximum200
19 July 2025
SSMCTF 2025
Web Exploitation(Easy)
Stealing Treasure
Created for the SSMCTF 2025 Writeup Competition
yuehab
12 July 2025
SSMCTF 2025
Web Exploitation(Hard)
Mai Mai Records
Mai Mai Records was a NoSQL injection challenge with filters written for the 2025 SSMCTF competition. This is one of the writeups created for the competition
elitecollapsez
13 April 2025
Cyberthon Training
Web Exploitation(Easy)
Cyberthon Independent Learning Web Challenges
Solutions to the five web challenges
poppet_t
24 March 2025
WhiteHacks 2025
Cryptography(Medium)
Unbearable
This challenge is unbearable to solve...
elitecollapsez
22 March 2025
WhiteHacks 2025
Web Exploitation(Medium)
Brute-Force
Bruteforce login with forensics and hash cracking
Baba is Dead
6 February 2025
BCACTF 5.0
Web Exploitation(Medium)
Cookie Clicker
You need to get 1e20 cookies, hope you have fun clicking!
Baba is Dead
6 February 2025
BCACTF 5.0
Web Exploitation(Medium)
Duck Finder
This old service lets you make some interesting queries. It hasn't been updated in a while, though.
Baba is Dead
6 February 2025
BCACTF 5.0
Web Exploitation(Medium)
Fogblaze
Can you bypass this website's new stateless CAPTCHA system?
Baba is Dead
6 February 2025
BCACTF 5.0
Web Exploitation(Medium)
Michaelsoft Gring
From the makers of famous operating system Binbows comes a new search engine to rival the best: Gring. The sqlite database is super secure and has only the best search results picked by our c
Baba is Dead
6 February 2025
BCACTF 5.0
Web Exploitation(Hard)
User #1
I was working on this website and wanted you to check it out. The code is a bit of a mess, since it's only an extremely early version. In fact, you're the very first user, with ID 1!
Baba is Dead
6 February 2025
TJCTF 2024
Web Exploitation(Easy)
Frog
A website about frogs. Ribbit
Baba is Dead
6 February 2025
TJCTF 2024
Web Exploitation(Easy)
Reader
A simple site reader website
Baba is Dead
6 February 2025
TJCTF 2024
Web Exploitation(Easy)
Fetcher
A simple site fetcher website
Baba is Dead
6 February 2025
TJCTF 2024
Web Exploitation(Easy)
Templater
A simple site template rendering website
Baba is Dead
6 February 2025
TJCTF 2024
Web Exploitation(Medium)
Music Checkout
Website to render music playlists
Baba is Dead
6 February 2025
TJCTF 2024
Web Exploitation(Hard)
Kaboot
A Kahoot Ripoff
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Web Exploitation(Easy)
Eat Flag Leh
Baba got tired of his friends not knowing where to eat, so he made a website just for that. His friends kept trying to eat his flags though, instead of the food, so Baba masterfully hid them!
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Web Exploitation(Easy)
View Source
Baba hates blind web challenges! He loves reading code, and wants other people to read code as well. So, he crafted this website to share his love! There are some bugs that Baba is still w
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Web Exploitation(Medium)
Baba Loves Pollution
Baba loves polluting the environment so much! Everyday, he throws straws into the Ocean, he burns orphanages simply to contribute to the environmental pollution, and even takes showers of mor
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Web Exploitation(Medium)
Formhub
Baba does a form every single day, but need other people to help him fill in forms for him! So, he created a simple website to spread forms to everyone! NOTE: ADMIN_CREDS have been set in
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Web Exploitation(Hard)
Circuitous Vertex Enigma
Baba Hates Graph Theory. So he made this website to promote his cause. Can you crack it?
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Competitive Programming(Easy)
Baba is Lost
Baba went to visit the glorious nation of North Korea! However, while there, he got very lost. Now the North Korean officials are after him, because of the several war crimes he has committed
Baba is Dead
6 February 2025
ISC2 Singapore Chapter CTF
Competitive Programming(Medium)
Kaboom
Baba has learnt his lesson from last time, so he isn’t going to North Korea anymore. Unfortunately for Baba, the North Korean’s found out where he was hiding in Singapore. Determined to punis
Baba is Dead
6 February 2025
Whitehacks CTF 2024
Web Exploitation(Medium)
Artistic Odyssey
Established in 1990, Artistic Hymn Pte. Ltd. continually updates and refreshes its webpage with the latest security measures. Help us identify any potential vulnerabilities Challenge Creat
Baba is Dead
6 February 2025
TISC 2024
Web Exploitation(Medium)
Language, Labyrinth and (Graphics)Magick
Good job on identifying the source of the attack! We are one step closer to identifying the mysterious entity, but there's still much we do not know. Beyond Discord and Uber H3, seems like
Baba is Dead
6 February 2025
TISC 2024
Hardware Hacking(Medium)
Hardware isnt that Hard!
Shucks... it seems like our enemies are making their own silicon chips??!? They have decided to make their own source of trust, a TPM (Trusted Platform Module) or I guess their best attempt a
Baba is Dead
6 February 2025
TISC 2024
Blockchain Security(Hard)
Noncevigator
I guess their Trusted Platform Modules were not so trusted afterall. What about blockchain? Blockchain is secure by design, right? It seems like our enemies may have hidden some of their t
Baba is Dead
6 February 2025
TISC 2024
Blockchain Security(Hard)
Baby Flagchecker
You've come so far, brave agents! Let us continue our mission to identify our threats, and retrieve the crucial information that they are hiding from the world. While scanning their networ
Baba is Dead
6 February 2025
TISC 2024
Reverse Engineering(Hard)
Wallfacer
Breaking news! We've managed to seize an app from their device. It seems to be an app that stores user data, but doesn’t seem to do much other than that... The other agent who recovered th
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Easy)
Shark Lotto
A website about shark lottery
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Easy)
Baby SSTI
Can you hack this website and get the flag?
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Easy)
Baby SQL
Word around the corner is that a group of hackers opened up a online shop aimed at robbing people of their money. We suspect that the shop uses SQL to query it's db and we need your help to s
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Easy)
Fanpage
Check out my new fanpage for Blahaj!
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
Calculator
I wrote this simple calculator app! Try to hack it and steal the admin cookie!
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
Secure Content
A website about bypassing XSS keyword filters
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
Insecure Content
Secure Content was secure, but this time its more (less) secure!
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
Screenshooter
I made an epic new website to take screenshots! Check it out!
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
SSTI Golf
I got bored of code-golfing so I decided to come up with ssti-golfing.
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
Compressor
Compress your JSON data with this new service!
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Medium)
Pkiller
I made this panel to make process management and killing so much easier! It's still not very complete, so it may have some bugs... Flag is in /flag.txt
Baba is Dead
6 February 2025
BlahajCTF 2024
Web Exploitation(Hard)
Userman
BlahajCorp just released a new User Management System to manage its employees across different divisions! Can you hack it and turn yourself into the admin?
Baba is Dead
5 February 2025
Grey Cat The Flag 2024 Finals
Web Exploitation(Hard)
ProtoGrader
ProtoGrader was one of the difficult web challenges in Grey CTF finals. The challenge was a fun application of prototype pollution.
Baba is Dead
5 February 2025
BCACTF 5.0
(Easy)
Sea Scavenger
Take a tour of the deep sea! Explore the depths of webpage secrets and find the hidden treasure. Pro tip: Zoom out!
Baba is Dead
5 February 2025
BCACTF 5.0
Web Exploitation(Easy)
Phone Number
I was trying to sign into this website, but now it's asking me for a phone number. The way I'm supposed to input it is strange. Can you help me sign in?
Baba is Dead
5 February 2025
BCACTF 5.0
Web Exploitation(Easy)
Tic Tac Toe
My friend wrote this super cool game of tic-tac-toe. It has an AI he claims is unbeatable. I've been playing the game for a few hours and I haven't been able to win. Do you think you could be
Baba is Dead
5 February 2025
BCACTF 5.0
Web Exploitation(Easy)
NoSQL
I found this database that does not use SQL, is there any way to break it?
Baba is Dead
5 February 2025
BCACTF 5.0
Web Exploitation(Medium)
JSLearning.com
Hey, can you help me with this Javascript problem? Making strings is hard.
Baba is Dead
5 February 2025
BCACTF 5.0
Web Exploitation(Medium)
MOC, INC.
Towards the end of last month, we started receiving reports about suspicious activity coming from a company called MOC, Inc. Our investigative team has tracked down their secret company porta
Baba is Dead
1 February 2025
Web Exploitation(Medium)
1048576
Baba got too good at 2048, so he decided to create his own 2048 game. Can you beat his high score?