SunshineCTF 2021


CTF Archive.

SunshineCTF 2021

Online, jeopardy-style CTF hosted by Hack@UCF (the Collegiate Cyber Defense Club at the University of Central Florida) and run by the Knightsec team — the sixth annual SunshineCTF, held in affiliation with BSides Orlando. Challenges span pwn, reversing, web, crypto, scripting, and misc. Flag format sun{...}.


Original Date: Sat, 18 Sept. 2021, 14:00 UTC — Sun, 19 Sept. 2021, 14:00 UTC
Original URL: https://sunshinectf.org/
CTFtime Entry: SunshineCTF 2021
Organizing Team: Knightsec



Challenges

What I'm about to tell you c3Vue2 is top secret. A conspiracy hlbG bigger than all of us. There's a powerful group of people out there that are secretly running the world. I'm talking about the xvX3dv guys no one knows about, the ones that are invisible. The top 1% of the top 1%, the cmxk guys that play God without permission. And now I think they're fQ== following me.

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: BLuəf0x#3274

Both Alice and Bob share the same modulus, but with different exponents. If only there was some way I could recover this message that was sent to both of them.

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: SunshineCTF Team

My text files keep getting decrypted. This time I stored my flag in an audio file to make it so cryptanalysis won't work any more.

P.S. Turn down your headphones. A lot.

P.P.S. Flag is all lowercase.

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: SunshineCTF Team

I found my old digital camera with important photos on it, but it won't turn on any more. I managed to recover some of the image files from its internal flash memory, but they seem to be all garbled up and unable to be opened on my computer. I've also found this program from the camera's CD-ROM that has something to do with converting images, so maybe that will be helpful? Please help me recover these important images!

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: kcolley#9067

I designed my own virtualized flag storage system a while back. Unfortunately, I think it may have gotten a bit... rusty.

Challenge contributed by Research Innovations, Inc (RII).

Note: ARM and Intel binaries are provided for convenient dynamic analysis. The hosted challenge is Intel, but the solution should be independent of architecture.

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: Research Innovations, Inc. (RII)

I mentioned to a friend of mine from Australia that I like the Game Boy Advance. Apparantly, they had a mysterious cartridge they found at a Men At Work concert, and they figured to send it me to figure out what's on it.

However, I have no clue why it keeps referencing a "flag." I ripped it already, but I can't figure out what it's about. Can you help me crack this code?

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: SunshineCTF Team

my boss is really mean i am trying my best to make the site he wants but he is really demanding, do you want to see it?

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: SunshineCTF Team

Lil Chompy found an online quiz on the popular website ChompFeed that tells you which type of reptile you are when you answer a series of questions. A friend told him that one of the possible outcomes is "Lil Chompy", but he can't figure out what answers lead to that result. Can you help him answer the quiz questions correctly to have an online quiz affirm that he is in fact Lil Chompy?

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: kcolley#9067

Story

Help!

Our travel backend has broken, and our valuable customers need assistance loading their credit cards from our database.

This is an emergency, just take the entire backend! The intern says something about a decryption script got encrypted or something, she left a lot of detailed comments and debug stuff, everything's well documented, and followed the best Water-Agile-Fall development cycle since the early 2000s.

We normally use the most advanced local webserver and reverse proxy into it from a Jump Box but this is such an emergency, just get it running! The decryptor script is critical to fixing this problem!

Notes

May want to shove this in a VM. Also it'll probably trip your virus scanner, not that it's doing malicious stuff... just that it looks darn malicious what it's doing. Windows Sandbox would work well.

This challenge was tested with PowerShell 5.1.19041.1151, and it should also work with 7.2.0-preview.9, but your mileage may vary.

The flag contains a unicode medal emoji; the checker also accepts the literal \ud83e\udd47 escape form in its place.

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: SunshineCTF Team

So, when looking at the feedback for SunshineCTF 2020, I was shocked when I saw an overwhelming positive response with the presence of emoji! So much so, that the organizers told me to theme a front-end for some emoji browser challenge. I have no idea what this challenge does, but it seems to render emoji and nothing else. Seems kind of redundant if that's true.

The service runs at http://localhost:8000/.


Author: SunshineCTF Team

Flag Vault 1

I know my stuff. I'll show you my vault even, but have fun trying to get into it.

The service runs at http://localhost:8000/.


Author: Helithumper#5000

Have you ever wanted to have dynamic types in C? Probably not, but I am giving them to you anyway!

Challenge contributed by Research Innovations, Inc (RII). Say hi to crandyman#5861 if you get a chance!

The service runs at localhost:1337.


Author: novafacing#7892

ProcrastinatorProgrammer I may have procrastinated.

This may be a mistake.

Or mistakes were made.

But don't worry! The keys to the kingdom are split into three parts... you'll never find them all!

Flag will be given by our backend in the standard pwn.college flag format, but make sure you put all the pieces together!

Notes

Need help on your math? If so? ProcrastinatorProgrammer is your buddy!

Send equations our way, and we'll solve them your way!

The three stages listen locally on localhost:65000, localhost:65001, and localhost:65002.


Author: SunshineCTF Team

You know just beacuse time goes on and things become popular it doesnt mean the classics aren't still good.

Use flagCheck to input the flag you get from the challenge to get the actual flag


Author: SunshineCTF Team


30-Day Scoreboard:

This scoreboard reflects solves for challenges in this module after the module launched in this dojo.

Rank Hacker Badges Score