Publications

February 17, 2021

Insane CTFZone: web-card explained

The article describes the steps to solve the web-card task designed for CTFZone 2019. Being a tribute to the XML format, the task featured a zero-day, an unusual way to exploit XXE, and a remarkable chain of vulnerabilities
September 2, 2020

CTFZone paper: trust area—backend part

The organizers delve into the technical details of a task for CTFZone Finals 2020, which involved the detection and exploitation of vulnerabilities in Android-powered mobile applications
September 2, 2020

CTFZone paper: trust area—client part

Continuing to explore the task for CTFZone Finals 2020 where the participants had to find and exploit vulnerabilities in Android applications
September 2, 2020

CTFZone paper: trust area—infra

The paper focuses on another aspect of the task for CTFZone Finals 2020 that dealt with Android vulnerabilities
August 24, 2020

CTFZone paper: little knowledge

A glimpse into how the orginizers managed to strike a balance between “cool, something new” and “this is way too hard” when developing a cryptography task for CTFZone Finals 2020
April 3, 2020

“The PCB badge that was never meant to be” or “How to lose on the home straight”

We explore a PCB badge developed for the OFFZONE 2020 conference that was canceled amid the pandemic. A true story of struggle for an ergonomic design, our quest for components during lockdown, some DIY magic to beat global shortages, and the straw that broke the camel’s back.
March 13, 2020

Write-up “CTFZone quals 2019: chicken”

The paper deals with the web task from the qualifying stage. The solution analysis has been suggested by Devand MacLean from Canada. Find out what vulnerability chain the participants encountered and what the chicken part was all about
February 6, 2020

Customize your own OFFZONE badge: shitty add-on with the light on

We examine some features that allow OFFZONE 2020 attendees to create a badge with unique design and configuration
January 31, 2020

Write-up “In the shadows”

The publication describes one of the tasks for the CTFZone qualifying stage that was held in autumn 2019
January 24, 2020

How we organized the CTFZone qualifying stage

The article is dedicated to the CTFZone qualifiers that took place in late 2019. With 1,043 participating teams from around the world, the competition reached as far as Zimbabwe