Welcome to GEEKCTF 2024! Your first FLAG will be flag{welcome_geekers}

I only trust what I don't believe.

nc chall.geekctf.geekcon.top 40546

Attachment

*flag format: flag{.*}

attachment

David, from a multinational e-commerce company, is developing a brand new front-end of the mall system for the company. But David was so lazy that he only finished the login screen in a whole week! Moreover, due to a configuration error, the new website was accidentally exposed to the public web.

http://chall.geekctf.geekcon.top:40472/

My notes management site is using OAuth authentication now, so I can open it to the Internet with peace of mind.

http://chall.geekctf.geekcon.top:40521

*flag format: flag{[0-9a-z]{1,}}

Escape from sandbox.

attachment

Please bypass checker.

attachment

nc chall.geekctf.geekcon.top 40245

Beat obfuscator.

attachment

nc chall.geekctf.geekcon.top 40246

P..trace?

attachments

Let's play Slay the Spire !

attachment

nc chall.geekctf.geekcon.top 40304

attachment

I am suffering from Herniated Nucleus Pulposus, please help me!

Attachment

nc chall.geekctf.geekcon.top 40555

I believe a larger space is good for security. I am testing my PKE instance with a short paragraph. The flag is of the format

flag{a_sentence_replacing_all_spaces_with_underlines}

Attachment

Mike always forgets important things, so he developed a memo program. Please log in.

Download

nc chall.geekctf.geekcon.top 40310

But Mike's program seems to have a bug, can you help find it？

Download

nc chall.geekctf.geekcon.top 40311

Got a new KB update from Macrohard.

(Please remove all whitespaces before submitting the flag.)

misc-fandr.7z

https://github.com/awesome-ctf/2024-WhereIsMyFlag

(Anything other than this repository is NOT relevant to this task.)

It is impossible to cross my tick, right?

nc chall.geekctf.geekcon.top 40548

I made a maze, I think no one can reach the target...Right? flag format flag{.*}

nc chall.geekctf.geekcon.top 40547

Attachment

Oh you write sagemath in python? Weak. Strong hackers only use system languages.

public_key: [ 23088386904128604836845071605795880792100492912906953566535202860981556736302, 60077173896552487770351325601540345274348665200628083719144874655338678035047 ]

attachment

In Rust we Trust, right? Right..?

attachment

*flag format: flag{.*}

attachment

Hey, I know it's JSON! But……incomplete?

*please wrap the final string with "flag{" and "}" before submitting

attachment

In the year 2124, the Sylastan beings stumbled upon a tattered piece of paper amidst the ruins of the British Museum. Legend had it that the black and white patterns on the paper directly encoded a precious treasure known to the long-lost humans as the "flag", a priceless wealth of immeasurable significance.

*flag format: flag{.*}

attachment

Yet Another JSON Formatter.

Do you know jq? jq is a lightweight and flexible JSON processor.

P.S. The flag is inside an environment variable.

My notes and secrets are stored in this secret vault. I'm sure no one can get them.

http://chall.geekctf.geekcon.top:40527/

PicBed is an elegant image hosting service which uses webp_server_go to serve your JPG/PNG/BMP/SVGs as WebP/AVIF format with compression, on-the-fly.

Attachment

P.S. It is recommended to test your exploit locally before creating an online instance.

Please Findme. Attachment

Are these pictures real or not?

Attachment

Very Simple Stack Buffer Overflow. attachment

Just finished setting up my blog. Oops there' s a deadline tonight, moving on to my assignments now.

http://chall.geekctf.geekcon.top:40523/

Using WordPress is a bit too dangerous, so I'm developing my own blogging platform, SafeBlog2, to have full control over its security.

Attachment

P.S. It is recommended to test your exploit locally before creating an online instance.

This VMP technique is hardened against automated attacks. So should I break it manually?

attachment

Good mountain and good water brew good wine, and good wine makes a man speak the truth.

attachment

http://chall.geekctf.geekcon.top:40404

My 'genius' hacker friend asked me to deploy a modified version of teeworlds on my server for fun. He even provided his patch (which seems harmless). Should I trust him?

The deployed teeworlds servers are at:

• chall.geekctf.geekcon.top:40303

• chall.geekctf.geekcon.top:40403

attachment

(You may finish the TeeWorlds-Door first)

The 'genius' pleaded not guilty to inserting a backdoor into the program. He also said that he sent me a secret message via the TeeWorlds server. I did not see this message (maybe I was busy killing the program and restarting my server at that moment). However, I captured the network traffic and the core dump. Could you please recover the message for me?

attachment

attachment

Mike has updated the program and made it more powerful.

Download

nc chall.geekctf.geekcon.top 40312

A easy vm, but how to get flag?

Download

nc chall.geekctf.geekcon.top 40313

You stole Alice's RSA private key, but it is sparse, can you recover the whole key?

Attachment

flag is md5sum privkey.pem | awk '{print "flag{"$1"}"}'

1% Crypto + 99% Reverse

Attachment

They say CTF held after year 3202 must contain a challenge of GPT.

Access Code: 20244202

http://chall.geekctf.geekcon.top:40525/

Imagine that the Internet is a complex plane, and every IP address is a point on the plane.

Given my coordinates (1.4588509144602441503773978e-125, i*7.0641610097882145623171291e-304), can you locate my address?

It was the spring of 2024 when a boy born in millennium picked up a real gun on the road. Because he was young, ignorant and fearless, he pulled the trigger. No one died and no one was injured. He thought he had fired a blank shot. Fourteen years later, he heard a faint sound of wind behind him while walking on the road. He stopped and turned around. The bullet hit him between the eyebrows.

curl http://chall.geekctf.geekcon.top:10038

RealOrNotRevenge

Attachment