# CTF - Lumixy Writeups

> ctf writeups

## Docs

- [How to Submit and Format a CTF Writeup for Review](https://doc.lumixy.net/contributing.md): Learn how to contribute your own CTF challenge solutions, follow the writeup format, get your pull request reviewed, and share knowledge with the community.
- [Evaluation](https://doc.lumixy.net/evaluation.md)
- [Geometry is Fun!](https://doc.lumixy.net/geometry-is-fun.md)
- [A Practical Guide to Reading CTF Challenge Writeups](https://doc.lumixy.net/how-to-use.md): Understand how writeups are structured, how to follow along with exploit scripts, and tips for getting the most out of each solution walkthrough.
- [What Are CTF Writeups? An Introduction to the Site](https://doc.lumixy.net/introduction.md): Learn what CTF competitions are, how writeups help you improve, and which challenge categories you will find fully documented on this site.
- [Loading](https://doc.lumixy.net/loading.md)
- [RSA Improved](https://doc.lumixy.net/rsa-improved.md)
- [Set Up a Safe and Isolated CTF Hacking Environment](https://doc.lumixy.net/setup/environment.md): Configure a dedicated environment for CTF challenges using virtual machines or Docker, covering Kali Linux, Parrot OS, and container-based setups.
- [Install and Configure Essential CTF Competition Tools](https://doc.lumixy.net/setup/tools.md): Install and configure the most important CTF tools including pwntools, Burp Suite, Ghidra, Wireshark, John the Ripper, and more — organized by category.
- [Shuffle](https://doc.lumixy.net/shuffle.md)
- [Trampoline](https://doc.lumixy.net/trampoline.md)
- [7 More Caesar Salads ](https://doc.lumixy.net/untitled-page.md)
- [AES CTF Writeup: Mode Vulnerabilities and Key Recovery](https://doc.lumixy.net/writeups/crypto/aes.md): AES CTF walkthrough covering ECB mode block patterns, CBC padding oracle attacks, IV reuse, and CTR mode keystream reuse exploitation.
- [Hash Cracking CTF Writeup: MD5, SHA, and Length Extension](https://doc.lumixy.net/writeups/crypto/hashing.md): CTF hash challenge walkthrough: crack MD5/SHA with hashcat and John, exploit length extension attacks, and bypass PHP type-juggling hash comparisons.
- [Cryptography CTF Challenges: Break Ciphers and Keys](https://doc.lumixy.net/writeups/crypto/overview.md): Explore cryptography CTF challenges covering RSA, AES, hashing, classical ciphers, and more. Learn how to identify and exploit cryptographic weaknesses.
- [RSA CTF Writeup: Factoring Weak Keys and Exploiting Flaws](https://doc.lumixy.net/writeups/crypto/rsa.md): RSA CTF challenge walkthrough covering small exponent attacks, common modulus, Wiener's attack, and factoring with RsaCtfTool and SageMath.
- [Forensics CTF Challenges: Investigation and Analysis](https://doc.lumixy.net/writeups/forensics/overview.md): Explore forensics CTF challenges covering steganography, PCAP analysis, disk images, memory dumps, and file carving to uncover hidden flags.
- [PCAP Network Forensics CTF Writeup: Analyzing Traffic](https://doc.lumixy.net/writeups/forensics/pcap-analysis.md): Network forensics CTF walkthrough using Wireshark and tshark to extract files, follow streams, decrypt TLS, and recover flags from packet captures.
- [Steganography CTF Writeup: Extract Flags from Images](https://doc.lumixy.net/writeups/forensics/steganography.md): Steganography CTF walkthrough: extract hidden data from PNG, JPEG, and WAV files using steghide, zsteg, LSB analysis, and spectral analysis.
- [OSINT CTF Writeup: Open Source Intelligence Techniques](https://doc.lumixy.net/writeups/misc/osint.md): OSINT CTF challenge walkthrough using Google dorking, reverse image search, social media investigation, geolocation, and Shodan to track down hidden flags.
- [Miscellaneous CTF Challenges: OSINT and Reverse Engineering](https://doc.lumixy.net/writeups/misc/overview.md): Explore miscellaneous CTF challenges covering OSINT investigations, reverse engineering, scripting puzzles, and unconventional flag-finding techniques.
- [Reverse Engineering CTF Writeup: Analyzing Binaries](https://doc.lumixy.net/writeups/misc/reverse-engineering.md): Reverse engineering CTF walkthrough: decompile binaries with Ghidra, analyze logic with GDB, patch checks, and extract flags from obfuscated programs.
- [Buffer Overflow CTF Writeup: Stack Smashing to Shell](https://doc.lumixy.net/writeups/pwn/buffer-overflow.md): Stack buffer overflow CTF walkthrough: find the offset, control EIP/RIP, redirect execution, and use pwntools to build and deliver the exploit payload.
- [Binary Exploitation CTF Challenges: Pwn Techniques](https://doc.lumixy.net/writeups/pwn/overview.md): Explore binary exploitation CTF challenges covering buffer overflows, ROP chains, heap exploits, and format strings. Learn to pwn with pwntools.
- [ROP Chain CTF Writeup: Bypassing NX with Gadget Chains](https://doc.lumixy.net/writeups/pwn/rop-chains.md): Return-oriented programming CTF walkthrough: find gadgets with ROPgadget, chain them to call system(), and bypass NX/DEP protections with pwntools.
- [Web Exploitation CTF Challenges: Techniques & Writeups](https://doc.lumixy.net/writeups/web/overview.md): Explore web exploitation CTF challenges covering SQL injection, XSS, SSRF, and more. Learn how to identify and exploit web vulnerabilities.
- [SQL Injection CTF Writeup: Database Extraction Techniques](https://doc.lumixy.net/writeups/web/sql-injection.md): Step-by-step SQL injection CTF walkthrough covering UNION-based, blind boolean, and time-based extraction with sqlmap and manual payloads.
- [Server-Side Request Forgery CTF Writeup: Internal Access](https://doc.lumixy.net/writeups/web/ssrf.md): SSRF CTF walkthrough: discover internal services, bypass SSRF filters, read cloud metadata, and chain vulnerabilities to capture the flag.
- [Cross-Site Scripting (XSS) CTF Writeup: Stealing Flags](https://doc.lumixy.net/writeups/web/xss.md): Detailed XSS CTF walkthrough covering reflected, stored, and DOM-based XSS with payload crafting, CSP bypass, and cookie theft techniques.
- [Yarn](https://doc.lumixy.net/yarn.md)
- [Zzz](https://doc.lumixy.net/zzz.md)