CTF

Recovering a flag hidden via stack-string construction and XOR obfuscation.

Abusing ImageMagick’s SVG text: pseudo-coder to read the flag file via server-side image conversion.

Use-after-free on a tcache chunk to overwrite a function pointer and call win().

Identify the abandoned ship overgrown with vegetation from an OSINT image — SS Ayrfield.

SSRF via Docker internal hostname to reach the metadata service and retrieve the flag.

Blind format-string exploit with ASLR off: leak stack address then use %n + call rax to redirect execution.

Reverse-psychology logic puzzle: telling the bot the flag IS the answer gets you the flag.

Apply bitwise NOT to a hex string to reveal the flag.

Crackme that stores the bitwise NOT of the flag bytes; invert them to get the flag.

Extracting a flag hidden inside a PDF stream using FlateDecode and base64.