Writeup in progress
Currently making the solution for babygame03 and the walkthrough will be published here as soon as it's ready.
Check back soon, or follow our latest updates on the homepage to be notified when the full writeup goes live.
Currently making the solution for babygame03 and the walkthrough will be published here as soon as it's ready.
Check back soon, or follow our latest updates on the homepage to be notified when the full writeup goes live.
Want more picoCTF 2024 writeups?
A harder babygame with added protections. Exploit out-of-bounds player movement to overwrite a function pointer and force the flag to print.
Two-stage exploit: format string leaks the stack canary, then ret2libc via overflow with canary bypass.
Predict the time-seeded rand() number, then exploit 120-byte overflow into a 100-byte buffer using a ROP chain to make the stack executable.
Brute-force 16 possible key values in a custom base-16 Caesar cipher to find the readable plaintext.
Wrap around the game map's top-left corner to increment the flag counter, then reach the exit via netcat.
Break a modified Vigenere cipher that operates on a custom alphabet or with non-standard key scheduling. Adapt classical cryptanalysis techniques to recover the plaintext.