sharr_57ea69101f1086ad0ae32d2439703942.tar.gz

ARRay manager through SHared file. <code>nc others.2023.zer0pts.com 9002</code>

sharr

aush_08f311931e81b109e10769690dbbf8eb.tar.gz

I will give you the shell, but after you authenticated yourself. <code>nc pwn.2023.zer0pts.com 9006</code>

aush

ringtone_15fcccc05165dd911a1182186789efd6.tar.gz

Catch the precious bells with my chrome extension, access its related website <a href="http://ringtone.2023.zer0pts.com:8505/" target="_blank">here</a>! * Please <a href="http://ringtone.2023.zer0pts.com:1337/" target="_blank">report us</a> if you find any bugs.

Ringtone

Check <a href="https://discord.gg/3QrDP2sMYd" target="_blank">Discord</a> for the flag. We will also announce some important information there.

welcome

decompile_me_42389a8be64197ae210cccf76908536f.tar.gz

Reverse engineering is getting easier thanks to IDA/Ghidra decompiler!

decompile me

himitsu_659f97c13f8f23c172017294f2788eb5.tar.gz

Nobody can read my note :) <code>nc pwn.2023.zer0pts.com 9003</code> (JP) <code>nc misc2.2023.zer0pts.com 9003</code> (US) <code>nc misc3.2023.zer0pts.com 9003</code> (EU)

Himitsu Note

elliptic_ring_rsa_ac3e85e2b9f7c9a7cdc90536147a2a43.tar.gz

RSA is hard over integer ring. What about RSA over elliptic curve ring (!?)

Elliptic Ring RSA

unlimited_braid_works_47340893fdaa202d7a9cc1ddfdd43ce3.tar.gz

This is probably hard problem. Is this commutative or non-commutative? <code>nc crypto.2023.zer0pts.com 10555</code>

Unlimited Braid Works

plain-blog_0ca2bbfebee2a86c919afa1fc29f1c41.tar.gz

I made a blog service consists of two servers: API server and Frontend server. The former provides APIs that you can see, add, or modify posts. The latter uses responses from API server and render it. 
 If you could get 1,000,000,000,000 likes on your post, I will give you the flag. The maximum number of likes is 5,000, though. 
 API server: <a href="http://plain-blog.2023.zer0pts.com:8400/" target="_blank">http://plain-blog.2023.zer0pts.com:8400/</a> 
 Frontend server: <a href="http://plain-blog.2023.zer0pts.com:8401/" target="_blank">http://plain-blog.2023.zer0pts.com:8401/</a>

Plain Blog

brainjit_4cadba48cc1db9d5021a7527545038da.tar.gz

++++[++++>---<]>-.---[----->+<]>-.+++[->+++<]>++.++++++++.+++++.--------.-[--->+<]>--.+[->+++<]>+.++++++++.-[++>---<]>+.-[--->++<]>-.++++++++++.+[---->+<]>+++.[->+++<]>+.-[->+++<]>.++[->+++<]>+.++++++++..-----------.-[--->+<]>-.++[--->++<]>.-----------.+++++++++++++.-------.--[--->+<]>--.[->+++<]>++.++++++.--.--[--->+<]>-.---[->++++<]>.-----.[--->+<]>-----.++[--->++<]>.-------.----.--[--->+<]>---.----.-[->+++++<]>-.+++++[->++<]>.-.+++++++++++.[-->+<]>++++.>++++++++++. <code>nc pwn.2023.zer0pts.com 9004</code>

BrainJIT

rsalcg2_0567e5e49fc8c134f214e4166e2a839d.tar.gz

LCG is weak even when it is used with RSA, but what if when they are stacked? This challenge was inspired by the <a href=https://github.com/RICSecLab/ricerca-ctf-2023-public/tree/main/crypto/rsalcg>RSALCG</a> in Ricerca CTF 2023 <code>nc crypto.2023.zer0pts.com 7002</code>

RSALCG2

Please answer the <a href="https://docs.google.com/forms/d/e/1FAIpQLSdC7W9Y3jiWBzYas8XD4f-rOgYSZIcxYVyL-GteXe7mtNfhlw/viewform?usp=sf_link" target="_blank">survey</a> for the flag. The more detailed your feedback is, the happier the organizers will be.

survey

flipper_d8dd4add83a6884900b6c1e848d30002.tar.gz

Get some flippers to swim in Linux kernel heap <code>nc others.2023.zer0pts.com 9007</code>

flipper

squarerng_1873b2fd7e7bb265e0f28924353ff2ad.tar.gz

I wrote a pseudorandom number generator. You can't guess the next bit without knowing each other's secret. <code>nc crypto.2023.zer0pts.com 10666</code>

SquareRNG

wise_565a387417533e5a25d7e8bc5c8d40b7.tar.gz

Yuri Briar suspects that Crystal Forger is a spy. <code>nc pwn.2023.zer0pts.com 9001</code>

WISE

jqi_e088823cd8a1f29b076271e3e8e5e4da.tar.gz

I think jq is useful, so I decided to make a Web app that uses jq. 
 <a href="http://jqi.2023.zer0pts.com:8300/" target="_blank">http://jqi.2023.zer0pts.com:8300/</a>

topology_44b5a960ca07add7c9c39e9b6a73f7a6.tar.gz

No worries. It's a network topology, not an algebraic one.

topology

netfs2.7z

<code>su</code> command delays for few seconds when I enter an invalid password. I added the feature to NetFS authentication. The password for <code>netfs2.7z</code> is the flag of "NetFS 1" <code>nc misc.2023.zer0pts.com 10022</code> (JP) <code>nc misc2.2023.zer0pts.com 10022</code> (US) <code>nc misc3.2023.zer0pts.com 10022</code> (EU)

NetFS 2

easy_factoring_63618afc3b4df329032c7d719aacc071.tar.gz

The word "decomposition" has multiple meanings. Can you decompose? <code>nc crypto.2023.zer0pts.com 10333</code>

easy_factoring

moduhash_35f1ef8f5bff3545c8ebc588874c42c6.tar.gz

This is related to a base of the theory of elliptic curves! <code>nc crypto.2023.zer0pts.com 10444</code>

moduhash

neko-note_9c9190afaa278a9ea487dde554b4883f.tar.gz

I made another note app. 
 <a href="http://neko-note.2023.zer0pts.com:8005/" target="_blank">http://neko-note.2023.zer0pts.com:8005/</a>

Neko Note

scoreshare_6f6e3ccd9ae4e1572c63931e88104522.tar.gz

Share your sheet music <a href="http://score-share.2023.zer0pts.com:8505/" target="_blank">here</a>! * Please <a href="http://score-share.2023.zer0pts.com:8515/" target="_blank">report us</a> if you find any bugs.

ScoreShare

mimikyu_59c963b5bc5b5f22e3dcd9074963e18c.tar.gz

mimikyu

warmuprofile_80841914cb6ef9b9cdb84c3234ff8704.tar.gz

I made an app to share your profile. 
 <a href="http://others.2023.zer0pts.com:8600/" target="_blank">http://others.2023.zer0pts.com:8600/</a> 
 <a href="http://misc.2023.zer0pts.com:8600/" target="_blank">http://misc.2023.zer0pts.com:8600/</a> (backup) 
 <a href="http://misc2.2023.zer0pts.com:8600/" target="_blank">http://misc2.2023.zer0pts.com:8600/</a> (US) 
 <a href="http://misc3.2023.zer0pts.com:8600/" target="_blank">http://misc3.2023.zer0pts.com:8600/</a> (EU) 
 
 Note: Click "Spawn container" to make a challenge container only for you.
 When writing exploits, be careful that the container asks for BASIC auth credentials.

Warmuprofile

fvm_54d0a1217b559e297b8ac3fed9b345cc.tar.gz

Are you bored with x86? Enjoy this x87 VM.

netfs1_0cca9052ca33f8625421e6c807d600be.tar.gz

NetFS is a simple file viewer over network. <code>nc misc.2023.zer0pts.com 10021</code> (JP) <code>nc misc2.2023.zer0pts.com 10021</code> (US) <code>nc misc3.2023.zer0pts.com 10021</code> (EU)

NetFS 1

qjail_d5be8ea3a16d38924a8ebdef24cad483.tar.gz

Captured in <a href="https://github.com/qilingframework/qiling" target="_blank">Qiling</a> <code>nc pwn.2023.zer0pts.com 9005</code>