Pico2026 No Fa

Uses crackstation to find unsalted sha-256 hashed password for admin. Then decodes Flask session token to get the OTP code.

In this video, there is a thorough walkthrough on the

PicoCTF

The following Python program connects to the server, gets the hex bytes of an executable, disassembled it and looks for where the ...

Grab RSA private key from JPEG comment and decrypt a file with it.

Use pwntools to read symbols from ELF file and send function addresses to server.

Access a website from Iceland!

Call an etherium contract using Foundry cast and trigger an integer overflow by depositing 2^256-1.

Another simple buffer overlow.

Combine files with cat and unzip.

Brute force a website, but time limited (only 10 attempts per 30 seconds) import requests import time URL ...

Uses xargs to generate over 300 web requests within a minute. This causes the server to fail over to the backup, which gives us ...

Answer questions about a vulnerable program with a stack buffer overflow.