Overview

Last weekend I participated in the 2021 edition of Wargames.MY. Lots of cool challenges and here are my writeups.

RE

• Capture the Flag - MIT Scratch Project
• bendera3 - Android vdex extraction
• flagmaker - Using GDB scripting to find the flag
• flagchecker - Shell script created via FIFO special file and executed by child process

Web

• web service - SSRF and Java Deserialization
• mountain - PHP mt_rand

Crypto

• easyrsa - rsa

forensics

• forensics

misc

• tryyourluck - ieee floating point NaN comparison stuff
• corrupt - corrupted png image
• sorok - wasm reversing