Skip to content

Commit f67b51f

Browse files
AlBovoAlBovo
committed
Updated site
1 parent 935d14c commit f67b51f

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

52 files changed

+4307
-178
lines changed

‎en/ctf/ctfatac/index.html‎

Lines changed: 1489 additions & 0 deletions
Large diffs are not rendered by default.

‎en/ctf/index.html‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -166,6 +166,21 @@ <h1>
166166
</h1>
167167
</header>
168168

169+
<article class="post-entry">
170+
<header class="entry-header">
171+
<h2 class="entry-hint-parent">CTF@AC 2025
172+
</h2>
173+
</header>
174+
<div class="entry-content">
175+
<p>CTF@AC 2025 Web 🌐 money Analysis The challenge exposes a minimal dashboard that supports third‑party plugins. When we upload a plugin, the platform also lets us download any existing ones (including the official flag.plugin).
176+
Exploit After downloading flag.plugin, we notice it’s encrypted. The server.py file contains both the key and the function to decrypt it, so we can locally decrypt it using decrypt_file.
177+
KEY = b&#34;SECRET_KEY!123456XXXXXXXXXXXXXXX&#34; def decrypt_file(input_path, output_path, key): with open(input_path, &#34;rb&#34;) as f: data = f.read() iv = data[:16] ciphertext = data[16:] cipher = AES.new(key, AES.MODE_CBC, iv) plaintext = unpad(cipher.decrypt(ciphertext), AES.block_size) with open(output_path, &#34;wb&#34;) as f: f.write(plaintext) The decrypted flag.plugin init.py contains the following code:
178+
...</p>
179+
</div>
180+
<footer class="entry-footer"><span title='2025-09-16 00:00:00 +0000 UTC'>September 16, 2025</span>&nbsp;·&nbsp;33 min&nbsp;·&nbsp;6997 words&nbsp;·&nbsp;Paolo</footer>
181+
<a class="entry-link" aria-label="post link to CTF@AC 2025" href="https://pascalctf.github.io/en/ctf/ctfatac/"></a>
182+
</article>
183+
169184
<article class="post-entry">
170185
<header class="entry-header">
171186
<h2 class="entry-hint-parent">scriptCTF 2025

‎en/ctf/index.xml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,15 @@
66
<description>Recent content in Capture The Flag 🚩 on Website</description>
77
<generator>Hugo -- 0.150.0</generator>
88
<language>en</language>
9-
<lastBuildDate>Fri, 22 Aug 2025 00:00:00 +0000</lastBuildDate>
9+
<lastBuildDate>Tue, 16 Sep 2025 00:00:00 +0000</lastBuildDate>
1010
<atom:link href="https://pascalctf.github.io/en/ctf/index.xml" rel="self" type="application/rss+xml" />
11+
<item>
12+
<title>CTF@AC 2025</title>
13+
<link>https://pascalctf.github.io/en/ctf/ctfatac/</link>
14+
<pubDate>Tue, 16 Sep 2025 00:00:00 +0000</pubDate>
15+
<guid>https://pascalctf.github.io/en/ctf/ctfatac/</guid>
16+
<description>Some writeups of the CTF@AC ctf 2025 edition.</description>
17+
</item>
1118
<item>
1219
<title>scriptCTF 2025</title>
1320
<link>https://pascalctf.github.io/en/ctf/scriptctf2025/</link>

‎en/ctf/scriptctf2025/index.html‎

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -701,6 +701,11 @@ <h3 id="analysis">Analysis<a hidden class="anchor" aria-hidden="true" href="#ana
701701
<li><a href="https://pascalctf.github.io/en/tags/osint/">Osint</a></li>
702702
</ul>
703703
<nav class="paginav">
704+
<a class="prev" href="https://pascalctf.github.io/en/ctf/ctfatac/">
705+
<span class="title">« Prev</span>
706+
<br>
707+
<span>CTF@AC 2025</span>
708+
</a>
704709
<a class="next" href="https://pascalctf.github.io/en/ctf/pascalctf2025/">
705710
<span class="title">Next »</span>
706711
<br>

‎en/index.xml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,15 @@
66
<description>Recent content on Website</description>
77
<generator>Hugo -- 0.150.0</generator>
88
<language>en</language>
9-
<lastBuildDate>Fri, 22 Aug 2025 00:00:00 +0000</lastBuildDate>
9+
<lastBuildDate>Tue, 16 Sep 2025 00:00:00 +0000</lastBuildDate>
1010
<atom:link href="https://pascalctf.github.io/en/index.xml" rel="self" type="application/rss+xml" />
11+
<item>
12+
<title>CTF@AC 2025</title>
13+
<link>https://pascalctf.github.io/en/ctf/ctfatac/</link>
14+
<pubDate>Tue, 16 Sep 2025 00:00:00 +0000</pubDate>
15+
<guid>https://pascalctf.github.io/en/ctf/ctfatac/</guid>
16+
<description>Some writeups of the CTF@AC ctf 2025 edition.</description>
17+
</item>
1118
<item>
1219
<title>scriptCTF 2025</title>
1320
<link>https://pascalctf.github.io/en/ctf/scriptctf2025/</link>

‎en/sitemap.xml‎

Lines changed: 94 additions & 55 deletions
Original file line numberDiff line numberDiff line change
@@ -2,8 +2,21 @@
22
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9"
33
xmlns:xhtml="http://www.w3.org/1999/xhtml">
44
<url>
5+
<loc>https://pascalctf.github.io/en/tags/binary/</loc>
6+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
7+
<xhtml:link
8+
rel="alternate"
9+
hreflang="it"
10+
href="https://pascalctf.github.io/it/tags/binary/"
11+
/>
12+
<xhtml:link
13+
rel="alternate"
14+
hreflang="en"
15+
href="https://pascalctf.github.io/en/tags/binary/"
16+
/>
17+
</url><url>
518
<loc>https://pascalctf.github.io/en/ctf/</loc>
6-
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
19+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
720
<xhtml:link
821
rel="alternate"
922
hreflang="it"
@@ -14,9 +27,22 @@
1427
hreflang="en"
1528
href="https://pascalctf.github.io/en/ctf/"
1629
/>
30+
</url><url>
31+
<loc>https://pascalctf.github.io/en/tags/crypto/</loc>
32+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
33+
<xhtml:link
34+
rel="alternate"
35+
hreflang="it"
36+
href="https://pascalctf.github.io/it/tags/crypto/"
37+
/>
38+
<xhtml:link
39+
rel="alternate"
40+
hreflang="en"
41+
href="https://pascalctf.github.io/en/tags/crypto/"
42+
/>
1743
</url><url>
1844
<loc>https://pascalctf.github.io/en/tags/ctf/</loc>
19-
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
45+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
2046
<xhtml:link
2147
rel="alternate"
2248
hreflang="it"
@@ -28,108 +54,147 @@
2854
href="https://pascalctf.github.io/en/tags/ctf/"
2955
/>
3056
</url><url>
31-
<loc>https://pascalctf.github.io/en/tags/osint/</loc>
32-
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
57+
<loc>https://pascalctf.github.io/en/ctf/ctfatac/</loc>
58+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
3359
<xhtml:link
3460
rel="alternate"
3561
hreflang="it"
36-
href="https://pascalctf.github.io/it/tags/osint/"
62+
href="https://pascalctf.github.io/it/ctf/ctfatac/"
3763
/>
3864
<xhtml:link
3965
rel="alternate"
4066
hreflang="en"
41-
href="https://pascalctf.github.io/en/tags/osint/"
67+
href="https://pascalctf.github.io/en/ctf/ctfatac/"
4268
/>
4369
</url><url>
44-
<loc>https://pascalctf.github.io/en/tags/programming/</loc>
45-
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
70+
<loc>https://pascalctf.github.io/en/tags/ctfatac/</loc>
71+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
4672
<xhtml:link
4773
rel="alternate"
4874
hreflang="it"
49-
href="https://pascalctf.github.io/it/tags/programming/"
75+
href="https://pascalctf.github.io/it/tags/ctfatac/"
5076
/>
5177
<xhtml:link
5278
rel="alternate"
5379
hreflang="en"
54-
href="https://pascalctf.github.io/en/tags/programming/"
80+
href="https://pascalctf.github.io/en/tags/ctfatac/"
5581
/>
5682
</url><url>
57-
<loc>https://pascalctf.github.io/en/tags/pyjail/</loc>
58-
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
83+
<loc>https://pascalctf.github.io/en/tags/ctfatac2025/</loc>
84+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
5985
<xhtml:link
6086
rel="alternate"
6187
hreflang="it"
62-
href="https://pascalctf.github.io/it/tags/pyjail/"
88+
href="https://pascalctf.github.io/it/tags/ctfatac2025/"
6389
/>
6490
<xhtml:link
6591
rel="alternate"
6692
hreflang="en"
67-
href="https://pascalctf.github.io/en/tags/pyjail/"
93+
href="https://pascalctf.github.io/en/tags/ctfatac2025/"
6894
/>
6995
</url><url>
70-
<loc>https://pascalctf.github.io/en/tags/scriptctf/</loc>
96+
<loc>https://pascalctf.github.io/en/tags/</loc>
97+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
98+
<xhtml:link
99+
rel="alternate"
100+
hreflang="it"
101+
href="https://pascalctf.github.io/it/tags/"
102+
/>
103+
<xhtml:link
104+
rel="alternate"
105+
hreflang="en"
106+
href="https://pascalctf.github.io/en/tags/"
107+
/>
108+
</url><url>
109+
<loc>https://pascalctf.github.io/en/tags/web/</loc>
110+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
111+
<xhtml:link
112+
rel="alternate"
113+
hreflang="it"
114+
href="https://pascalctf.github.io/it/tags/web/"
115+
/>
116+
<xhtml:link
117+
rel="alternate"
118+
hreflang="en"
119+
href="https://pascalctf.github.io/en/tags/web/"
120+
/>
121+
</url><url>
122+
<loc>https://pascalctf.github.io/en/</loc>
123+
<lastmod>2025-09-16T00:00:00+00:00</lastmod>
124+
<xhtml:link
125+
rel="alternate"
126+
hreflang="it"
127+
href="https://pascalctf.github.io/it/"
128+
/>
129+
<xhtml:link
130+
rel="alternate"
131+
hreflang="en"
132+
href="https://pascalctf.github.io/en/"
133+
/>
134+
</url><url>
135+
<loc>https://pascalctf.github.io/en/tags/osint/</loc>
71136
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
72137
<xhtml:link
73138
rel="alternate"
74139
hreflang="it"
75-
href="https://pascalctf.github.io/it/tags/scriptctf/"
140+
href="https://pascalctf.github.io/it/tags/osint/"
76141
/>
77142
<xhtml:link
78143
rel="alternate"
79144
hreflang="en"
80-
href="https://pascalctf.github.io/en/tags/scriptctf/"
145+
href="https://pascalctf.github.io/en/tags/osint/"
81146
/>
82147
</url><url>
83-
<loc>https://pascalctf.github.io/en/ctf/scriptctf2025/</loc>
148+
<loc>https://pascalctf.github.io/en/tags/programming/</loc>
84149
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
85150
<xhtml:link
86151
rel="alternate"
87152
hreflang="it"
88-
href="https://pascalctf.github.io/it/ctf/scriptctf2025/"
153+
href="https://pascalctf.github.io/it/tags/programming/"
89154
/>
90155
<xhtml:link
91156
rel="alternate"
92157
hreflang="en"
93-
href="https://pascalctf.github.io/en/ctf/scriptctf2025/"
158+
href="https://pascalctf.github.io/en/tags/programming/"
94159
/>
95160
</url><url>
96-
<loc>https://pascalctf.github.io/en/tags/</loc>
161+
<loc>https://pascalctf.github.io/en/tags/pyjail/</loc>
97162
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
98163
<xhtml:link
99164
rel="alternate"
100165
hreflang="it"
101-
href="https://pascalctf.github.io/it/tags/"
166+
href="https://pascalctf.github.io/it/tags/pyjail/"
102167
/>
103168
<xhtml:link
104169
rel="alternate"
105170
hreflang="en"
106-
href="https://pascalctf.github.io/en/tags/"
171+
href="https://pascalctf.github.io/en/tags/pyjail/"
107172
/>
108173
</url><url>
109-
<loc>https://pascalctf.github.io/en/tags/web/</loc>
174+
<loc>https://pascalctf.github.io/en/tags/scriptctf/</loc>
110175
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
111176
<xhtml:link
112177
rel="alternate"
113178
hreflang="it"
114-
href="https://pascalctf.github.io/it/tags/web/"
179+
href="https://pascalctf.github.io/it/tags/scriptctf/"
115180
/>
116181
<xhtml:link
117182
rel="alternate"
118183
hreflang="en"
119-
href="https://pascalctf.github.io/en/tags/web/"
184+
href="https://pascalctf.github.io/en/tags/scriptctf/"
120185
/>
121186
</url><url>
122-
<loc>https://pascalctf.github.io/en/</loc>
187+
<loc>https://pascalctf.github.io/en/ctf/scriptctf2025/</loc>
123188
<lastmod>2025-08-22T00:00:00+00:00</lastmod>
124189
<xhtml:link
125190
rel="alternate"
126191
hreflang="it"
127-
href="https://pascalctf.github.io/it/"
192+
href="https://pascalctf.github.io/it/ctf/scriptctf2025/"
128193
/>
129194
<xhtml:link
130195
rel="alternate"
131196
hreflang="en"
132-
href="https://pascalctf.github.io/en/"
197+
href="https://pascalctf.github.io/en/ctf/scriptctf2025/"
133198
/>
134199
</url><url>
135200
<loc>https://pascalctf.github.io/en/tags/breaches/</loc>
@@ -345,32 +410,6 @@
345410
hreflang="en"
346411
href="https://pascalctf.github.io/en/tags/olicyber/"
347412
/>
348-
</url><url>
349-
<loc>https://pascalctf.github.io/en/tags/binary/</loc>
350-
<lastmod>2025-03-26T00:00:00+00:00</lastmod>
351-
<xhtml:link
352-
rel="alternate"
353-
hreflang="it"
354-
href="https://pascalctf.github.io/it/tags/binary/"
355-
/>
356-
<xhtml:link
357-
rel="alternate"
358-
hreflang="en"
359-
href="https://pascalctf.github.io/en/tags/binary/"
360-
/>
361-
</url><url>
362-
<loc>https://pascalctf.github.io/en/tags/crypto/</loc>
363-
<lastmod>2025-03-26T00:00:00+00:00</lastmod>
364-
<xhtml:link
365-
rel="alternate"
366-
hreflang="it"
367-
href="https://pascalctf.github.io/it/tags/crypto/"
368-
/>
369-
<xhtml:link
370-
rel="alternate"
371-
hreflang="en"
372-
href="https://pascalctf.github.io/en/tags/crypto/"
373-
/>
374413
</url><url>
375414
<loc>https://pascalctf.github.io/en/ctf/pascalctf2025/</loc>
376415
<lastmod>2025-03-26T00:00:00+00:00</lastmod>

‎en/tags/binary/index.html‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -151,6 +151,21 @@ <h1>
151151
</h1>
152152
</header>
153153

154+
<article class="post-entry tag-entry">
155+
<header class="entry-header">
156+
<h2 class="entry-hint-parent">CTF@AC 2025
157+
</h2>
158+
</header>
159+
<div class="entry-content">
160+
<p>CTF@AC 2025 Web 🌐 money Analysis The challenge exposes a minimal dashboard that supports third‑party plugins. When we upload a plugin, the platform also lets us download any existing ones (including the official flag.plugin).
161+
Exploit After downloading flag.plugin, we notice it’s encrypted. The server.py file contains both the key and the function to decrypt it, so we can locally decrypt it using decrypt_file.
162+
KEY = b&#34;SECRET_KEY!123456XXXXXXXXXXXXXXX&#34; def decrypt_file(input_path, output_path, key): with open(input_path, &#34;rb&#34;) as f: data = f.read() iv = data[:16] ciphertext = data[16:] cipher = AES.new(key, AES.MODE_CBC, iv) plaintext = unpad(cipher.decrypt(ciphertext), AES.block_size) with open(output_path, &#34;wb&#34;) as f: f.write(plaintext) The decrypted flag.plugin init.py contains the following code:
163+
...</p>
164+
</div>
165+
<footer class="entry-footer"><span title='2025-09-16 00:00:00 +0000 UTC'>September 16, 2025</span>&nbsp;·&nbsp;33 min&nbsp;·&nbsp;6997 words&nbsp;·&nbsp;Paolo</footer>
166+
<a class="entry-link" aria-label="post link to CTF@AC 2025" href="https://pascalctf.github.io/en/ctf/ctfatac/"></a>
167+
</article>
168+
154169
<article class="post-entry tag-entry">
155170
<header class="entry-header">
156171
<h2 class="entry-hint-parent">Pascal CTF Beginner 2025

‎en/tags/binary/index.xml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,8 +6,15 @@
66
<description>Recent content in Binary on Website</description>
77
<generator>Hugo -- 0.150.0</generator>
88
<language>en</language>
9-
<lastBuildDate>Wed, 26 Mar 2025 00:00:00 +0000</lastBuildDate>
9+
<lastBuildDate>Tue, 16 Sep 2025 00:00:00 +0000</lastBuildDate>
1010
<atom:link href="https://pascalctf.github.io/en/tags/binary/index.xml" rel="self" type="application/rss+xml" />
11+
<item>
12+
<title>CTF@AC 2025</title>
13+
<link>https://pascalctf.github.io/en/ctf/ctfatac/</link>
14+
<pubDate>Tue, 16 Sep 2025 00:00:00 +0000</pubDate>
15+
<guid>https://pascalctf.github.io/en/ctf/ctfatac/</guid>
16+
<description>Some writeups of the CTF@AC ctf 2025 edition.</description>
17+
</item>
1118
<item>
1219
<title>Pascal CTF Beginner 2025</title>
1320
<link>https://pascalctf.github.io/en/ctf/pascalctf2025/</link>

‎en/tags/crypto/index.html‎

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -151,6 +151,21 @@ <h1>
151151
</h1>
152152
</header>
153153

154+
<article class="post-entry tag-entry">
155+
<header class="entry-header">
156+
<h2 class="entry-hint-parent">CTF@AC 2025
157+
</h2>
158+
</header>
159+
<div class="entry-content">
160+
<p>CTF@AC 2025 Web 🌐 money Analysis The challenge exposes a minimal dashboard that supports third‑party plugins. When we upload a plugin, the platform also lets us download any existing ones (including the official flag.plugin).
161+
Exploit After downloading flag.plugin, we notice it’s encrypted. The server.py file contains both the key and the function to decrypt it, so we can locally decrypt it using decrypt_file.
162+
KEY = b&#34;SECRET_KEY!123456XXXXXXXXXXXXXXX&#34; def decrypt_file(input_path, output_path, key): with open(input_path, &#34;rb&#34;) as f: data = f.read() iv = data[:16] ciphertext = data[16:] cipher = AES.new(key, AES.MODE_CBC, iv) plaintext = unpad(cipher.decrypt(ciphertext), AES.block_size) with open(output_path, &#34;wb&#34;) as f: f.write(plaintext) The decrypted flag.plugin init.py contains the following code:
163+
...</p>
164+
</div>
165+
<footer class="entry-footer"><span title='2025-09-16 00:00:00 +0000 UTC'>September 16, 2025</span>&nbsp;·&nbsp;33 min&nbsp;·&nbsp;6997 words&nbsp;·&nbsp;Paolo</footer>
166+
<a class="entry-link" aria-label="post link to CTF@AC 2025" href="https://pascalctf.github.io/en/ctf/ctfatac/"></a>
167+
</article>
168+
154169
<article class="post-entry tag-entry">
155170
<header class="entry-header">
156171
<h2 class="entry-hint-parent">Pascal CTF Beginner 2025

0 commit comments

Comments
 (0)