UofTCTF https://uoftctf.org/ Recent content in University of Toronto Capture the Flag Team. on UofTCTF Hugo -- gohugo.io en-us Mon, 05 Feb 2024 00:00:00 -0500 ISSessions Espionage CTF 2024 RE challenge writeups https://uoftctf.org/posts/espionage-rev-2024/ Mon, 05 Feb 2024 00:00:00 -0500 https://uoftctf.org/posts/espionage-rev-2024/ Write-ups for all the reverse engineering challenges in Espionage CTF 2024. ISSessions Espionage CTF 2024 - pwn challenge writeups https://uoftctf.org/posts/espionage-pwn-2024/ Sun, 28 Jan 2024 00:00:00 -0500 https://uoftctf.org/posts/espionage-pwn-2024/ crazy solutions inside CyberSci 2022 - pwn - String Storage https://uoftctf.org/posts/string-storage/ Sat, 12 Nov 2022 00:00:00 -0500 https://uoftctf.org/posts/string-storage/ Abusing an off-by-one error in a search query to extract dereferenced data Learning: Week 4 https://uoftctf.org/posts/learning-week-4/ Sun, 02 Oct 2022 04:20:21 -0400 https://uoftctf.org/posts/learning-week-4/ A beginner's guide to CTF Learning: Week 3 https://uoftctf.org/posts/learning-week-3/ Sun, 25 Sep 2022 04:20:21 -0400 https://uoftctf.org/posts/learning-week-3/ A beginner's guide to CTF Learning: Week 2 https://uoftctf.org/posts/learning-week-2/ Sun, 18 Sep 2022 04:20:21 -0400 https://uoftctf.org/posts/learning-week-2/ A beginner's guide to CTF Learning: Week 1 https://uoftctf.org/posts/learning-week-1/ Sun, 11 Sep 2022 04:20:21 -0400 https://uoftctf.org/posts/learning-week-1/ A beginner's guide to CTF Proving-Ground-Nickel-Walkthrough https://uoftctf.org/posts/proving-ground-nickel-walkthrough/ Sat, 18 Jun 2022 00:00:00 -0400 https://uoftctf.org/posts/proving-ground-nickel-walkthrough/ Proving Ground Nickel Walkthrough Deobfuscating Javascript via AST: A Peculiar JSFuck-esque Case https://uoftctf.org/posts/deobfuscating-javascript-via-ast-a-peculiar-jsfuck-esque-case/ Tue, 14 Jun 2022 12:46:47 -0400 https://uoftctf.org/posts/deobfuscating-javascript-via-ast-a-peculiar-jsfuck-esque-case/ A guide detailing how to deobfuscate JSFuck-esque code. Deobfuscating Javascript via AST: Removing Dead or Unreachable Code https://uoftctf.org/posts/deobfuscating-javascript-via-ast-removing-dead-or-unreachable-code/ Sat, 04 Jun 2022 16:20:34 -0400 https://uoftctf.org/posts/deobfuscating-javascript-via-ast-removing-dead-or-unreachable-code/ A guide detailing how to remove dead code in obfuscated javascript. Deobfuscating Javascript via AST: Replacing References to Constant Variables with Their Actual Value https://uoftctf.org/posts/deobfuscating-javascript-via-ast-replacing-references-to-constant-variables-with-their-actual-value/ Tue, 31 May 2022 11:10:37 -0400 https://uoftctf.org/posts/deobfuscating-javascript-via-ast-replacing-references-to-constant-variables-with-their-actual-value/ A guide detailing how to simplify references to constants in obfuscated javascript. Deobfuscating Javascript via AST: Constant Folding/Binary Expression Simplification https://uoftctf.org/posts/deobfuscating-javascript-via-ast-constant-folding/binary-expression-simplification/ Sat, 28 May 2022 22:56:01 -0400 https://uoftctf.org/posts/deobfuscating-javascript-via-ast-constant-folding/binary-expression-simplification/ A guide detailing how to deobfuscate programs obfuscated with simplifiable binary expressions. Deobfuscating Javascript via AST: Converting Bracket Notation => Dot Notation for Property Accessors https://uoftctf.org/posts/deobfuscating-javascript-via-ast-converting-bracket-notation-dot-notation-for-property-accessors/ Sat, 28 May 2022 18:31:06 -0400 https://uoftctf.org/posts/deobfuscating-javascript-via-ast-converting-bracket-notation-dot-notation-for-property-accessors/ A guide detailing how to restore dot operator notation in obfuscated javascript. Deobfuscating Javascript via AST: Reversing Various String Concealing Techniques https://uoftctf.org/posts/deobfuscating-javascript-via-ast-reversing-various-string-concealing-techniques/ Sun, 22 May 2022 09:18:36 -0400 https://uoftctf.org/posts/deobfuscating-javascript-via-ast-reversing-various-string-concealing-techniques/ A guide detailing how to undo string concealing in obfuscated javascript. An Introduction to Javascript Obfuscation & Babel https://uoftctf.org/posts/an-introduction-to-javascript-obfuscation-babel/ Sat, 21 May 2022 23:44:58 -0400 https://uoftctf.org/posts/an-introduction-to-javascript-obfuscation-babel/ An introduction to Javascript obfuscation, abstract syntax trees, and Babel in the context of reverse-engineering Notes of dreamhack wargames https://uoftctf.org/posts/notes-of-dreamhack-wargames/ Thu, 06 Jan 2022 00:00:00 -0500 https://uoftctf.org/posts/notes-of-dreamhack-wargames/ short notes for wargames hosted on dreamhack.io Notes of HTB Machine Labs https://uoftctf.org/posts/notes-of-htb-machine-labs/ Tue, 28 Dec 2021 00:00:00 -0500 https://uoftctf.org/posts/notes-of-htb-machine-labs/ short notes for HTB Machine Lab Wrap-up for some simple SQL Injection methods https://uoftctf.org/posts/wrap-up-for-some-simple-sql-injection-methods/ Mon, 20 Dec 2021 00:00:00 -0500 https://uoftctf.org/posts/wrap-up-for-some-simple-sql-injection-methods/ Some basic methods for SQL injection.