[Web] Dangerous

My friend told me there's a secret page on this forum, but it's only for administrators.

[crypto] Personal Proxy

To access the internet I setup a personal socks proxy using open-source software, and a tunnel with strong password is used to make it secure.

Here is my proxy config file and a network traffic captured when uploading my secret file to personal storage center. I do not believe anyone

[forensics] Scriptkiddie

Script kiddie. One of my students felt like a cool ransomware hacker. This is just as funny as stupid, for we have all the traffic been written...

[pwn] Calculataser

We've spun up an old websocket arbitrary precision calculator from 2014 just bc we can, obviously. We made a client for you. Give it a whirl!

We've set up a chroot for you to develop your musl code in. It's bare, so install whatever you need.The password is ... Feel free to log in with: socat -,raw,echo=0 tcp:challenges.tamuctf.com:4353

[reverse] Splatter Calc

Reverse this binary to determine the input number required to read the flag on the remote server.

[pentest] Spell iCUPS

I turned on a small CUPS server we found in the back for saving PDFs that we make locally. Didn't have SSH or anything, though, but thankfully it had socat.

[pentest] Helpful Builder

I know you can't build on your machine -- it's so dumb that IT won't install JDK12 for one of our developers.

Go ahead and fire over a tarfile with the contents of src/main in it on our typical netcat port, I'll compile the test jar so you can run

Our monitoring systems noticed some funny-looking DNS traffic on one of our computers. We have the network logs from around the time of the incident. Want to take a look?

[reverse] Just BC

We found this reference file for a program contained by a remote server, but we have no idea what it is. All we know is that whenever we connect there's a password prompt. Can you figure out what that password is?

Echo as a service (EaaS) is going to be the newest hot startup! We've tapped a big market: Developers who really like SaaS.nc challenges.tamuctf.com 4251

[web] Credits

Try testing out this new credit system that I just created!Hint: Credit generation is rate limited. It is literally impossible to generate 2,000,000,000 credits within the CTF timeframe. Don't be that guy.

We've recovered this disk image but it seems to be damaged. Can you recover any useful information from it?

[Misc] Alcapone

Eliot Ness is the lead on taking down Al Capone. He has gained access to Capone's personal computer but being the good detective he is, he got the disk image of the computer rather than look through the actual computer. Can you help Ness out and find any information to

[Misc] ZippityDoodah

Lorelei, a nuclear engineer, is practicing how to create folders to organize her notes. She works closely withPOTUS to secure our nuclear missiles. In order for her to send the nuclear codes to the correct authorities, she needsto zip all the files and make the data hard to find. Your

[misc] Noisy

My furrier friend tried to send me a morse code message about some new furs, but he was using anoisy connection. I think he repeated it a few times but I still can't tell what hesaid, could you figure out what he was trying to tell me? Here's the code

[web] Woooosh

Clam's tired of people hacking his sites so he spammed obfuscation on his new game. I have a feelingthat behind that wall of obfuscated javascript there's still a vulnerable site though.Can you get enough points to get the flag? I also found the backend source.

[web] LeetTube

I developed a new video streaming service just for hackers. Learn all about viruses,IP addresses, and more on LeetTube! Here's the source code and the Dockerfile.Note: the server is also running behind NGINX.

[misc] PSK

My friend sent my yet another mysterious recording... He told me he was inspiredby PicoCTF 2019 and made his own transmissions. I've looked at it, and it seemsto be really compact and efficient. Only 31 bps!!

Clam thinks he's really cool and compiled a database of "criminal records" with a site to top it all off. I've dropped the tables once before but this time he took some extra security measures and I think he even hid a flag in there. Can you get

[binary] Canary

A tear rolled down her face like a tractor. “David,” she said tearfully, “I don’t want to be a farmer no more.” Can you call the flag function in this program (source)?

[binary] No canary

Agriculture is the most healthful, most useful and most noble employment of man. Can you callthe flag function in this program (source)?

You remember when I said I dropped clam's tables? Well that was on Xmas day. And because I ruined his Xmas, he created the Anti Xmas Warriors to try to ruin everybody's Xmas. Despite his best efforts, Xmas Still Stands. But, he did manage to get a flag

Page 1 / 5 »