CyberChallenge.IT is a national training program for cybersecurity talent. These are the challenges I solved during the course.
Submit a withdrawal amount in scientific notation to exploit loose type parsing and credit 1 billion to your balance.
Identify and work around a Python variable shadowing bug where a function definition overwrites a string variable of the same name.
Boolean blind SQL injection on a login form to extract a password character by character using HEX comparison.
Use BeautifulSoup to extract HTML comment nodes from a page and reveal the hidden flag.
Write open-read-write shellcode to exfiltrate /flag.txt when execve is blocked by a seccomp filter.
Write minimal x86 shellcode that sets EAX to 0x13371338 to satisfy the binary’s check and unlock execution flow.
Classic x86-64 ret2win: overflow the return address, use a pop rdi gadget to pass the /bin/cat flag.txt string as argument, jump to system.
Automate extraction of 3000 nested zip files to retrieve the flag from the innermost archive.