Cloud Village CTF - DEFCON 33 Writeups

This repository contains writeups and solutions for the Cloud Village CTF held at DEFCON 33.

✅ Solved Challenges (13/25)

Challenge Name	Points	Folder	Writeup	By
Incident Responder	930	Incident_Responder_930/	📖 Writeup	andoniaf
Action Theft Repo	890	Action_Theft_Repo_890/	📖 Writeup	andoniaf
AMIception Shadow Secrets	870	AMIception_Shadow_Secrets_870/	📖 Writeup	sanchezpaco
Pipeline Drift	870	Pipeline_Drift_870/	📖 Writeup	andoniaf
TimeBomb	850	TimeBomb_850/	📖 Writeup	andoniaf
HEX-FORM	820	HEX-FORM_820/	📖 Writeup	sanchezpaco
Objective MCP	750	Objective_MCP_750/	📖 Writeup	sanchezpaco
Orion	740	Orion_740/	TBD	sanchezpaco
Evi-LLM	610	Evi-LLM_610/	📖 Writeup	pedrooot
Dumpster Dive Layer 0	450	Dumpster_Dive_Layer_0_450/	📖 Writeup	sanchezpaco
HiddenState	320	HiddenState_320/	📖 Writeup	TBD
Classified Registry	300	Classified_Registry_300/	📖 Writeup	sanchezpaco
Spectre Heist	300	Spectre_Heist_300/	📖 Writeup	TBD

❌ Unsolved Challenges (12/25)

Challenge Name	Points	Folder	Status
Part 1: Hidden in the Clouds	1000	Part_1_Hidden_in_the_Clouds_1000/	❌ Unsolved
Part 3: Discarded	1000	Part_3_Discarded_1000/	❌ Unsolved
Unreachable	970	Unreachable_970/	❌ Unsolved
Dumpster Dive	960	Dumpster_Dive_960/	❌ Unsolved
The Butler Did It	950	The_Butler_Did_It_950/	❌ Unsolved
Part 2: Petit's Shortcut	940	Part_2_Petits_Shortcut_940/	❌ Unsolved
Purrlock-Cafe	940	Purrlock-Cafe_940/	❌ Unsolved
Operation XORfidential	930	Operation_XORfidential_930/	❌ Unsolved
Mission Overflow	920	Mission_Overflow_920/	❌ Unsolved
Operation Ghost Identity	900	Operation_Ghost_Identity_900/	❌ Unsolved
CipherSpoke NetOps	890	CipherSpoke_NetOps_890/	❌ Unsolved
BruteForce Login	780	BruteForceLogin_780/	❌ Unsolved

Note: The point values shown were dynamic during the competition, decreasing as more teams solved each challenge. The values listed represent the points earned at the time of solving.

Statistics during the CTF

• Solved 13 of 25 challenges
• Top 10 of 146 teams

Repository Structure

├── challenges/
│   ├── Action_Theft_Repo_890/
│   ├── AMIception_Shadow_Secrets_870/
│   ├── Classified_Registry_300/
│   └── ... (other challenge folders)
└── README.md

Each challenge folder contains:

• Challenge screenshots/descriptions (.jpg files)
• Solution writeup (when solved) in README.md format

About Cloud Village

Cloud Village is an open space to meet folks interested in offensive and defensive aspects of cloud security.

Other teams writeups

• https://ctf.edwinczd.com/2025/defcon-cloud-village-2025
• https://tresscross.blog/cloud-village-ctf-defcon-33/

Contributing

If you solved any of the unsolved challenges or want to improve existing writeups, feel free to contribute!