#picoctf

Overview We're given a web application with a login page. The goal is to find the flag...

Overview We're given a Flask web application with a login system and 2FA (Two-Factor...

Overview We're given two files — an HAProxy load balancer config and a Flask app. The goal...

PicoCTF Cookies 🍪 ( Web Exploitation ) Easy This challenge focuses on the use and...

PicoCTF Inspect HTML Writeup SUPER SUPER EASY Just Inspect the source code. TADAAAAA...

picoCTF forensics challenges come in all shapes, but Scan Surprise from the General Skills category is one where the difficulty isn’t the technique — it’s

HTML source code review is one of those skills that sounds obvious in hindsight, yet I spent a full 30+ minutes chasing the wrong rabbit before I figured

Introduction This is my writeup for the picoCTF challenge RED — a forensics puzzle centered on LSB steganography hidden inside a PNG image. I used exiftoo

picoCTF Crack the Power is an RSA cryptography challenge where the key insight isn’t just knowing the attack — it’s reading the numbers closely enough to

Magic bytes corruption, hex editing, and a JPEG hiding in plain sight — this is my full walkthrough of the picoCTF 2019 “Corrupted File” forensics challen

How I finally solved picoCTF Mini RSA: three cube root failures the gmpy2 k-iteration fix and why floating-point silently corrupts big-integer roots.

picoCTF DISKO 1 — why mounting, binwalk, and Sleuth Kit all come up empty, and how strings reads raw FAT16 sectors to find the flag in two seconds.