DEV Community

bud1mu
bud1mu

Posted on

Kashi CTF 2025 Writeup - English

Table of Contents :

  • OSINT
    • Kings (458 Pts)
    • Old Diner (411 Pts)
  • Misc
    • Easy Jail (100 Pts)
    • Final Game? (432 Pts)

OSINT

1. Kings

Description_Challenge

Attachment :

attachment_kings

The attachment didn't help alot, but this.

Image description

it helps alot.

Image description

now we know that the artist is Ustad Mansur & the extinct bird is Dodo (extinct but not forgotten) 😔

search where the painting is and lead me to this web.

Image description

got the location.
Image description

next, we gotta search that location using google maps, and take its coordinate as the flag.

Image description

got the flag 🎉
Flag : KashiCTF{59.9399_30.3149}

02. Old Diner

Image description

searching for places in google, and lead me to this website.

Image description

try to seek further information about Lexington Candy Shop, and got their website. Pretty Old Diner huh ?

Image description

i thought this is the right place. then, i tried to use simple google dork using information from challenge description to seek further information.

Image description

now we know that someone has made review on that website. then, search for it.

Image description

gotcha! found him. let's see how much it costs him.

Image description

so the amount he paid is $41.65, and the name of diner is Lexington Candy Shop.

got the flag 🎉
Flag : KashiCTF{Lexington_Candy_Shop_41.65}


Misc

1. Easy Jail

Image description

One popular type of challenge in many CTFs is the "Jail Challenge", which has players try to escape a code sandbox with some sort of restriction applied. When I checked the source code, I noticed that there were no filters or restrictions on user input.

Image description

This means we can easily send our payload like this.

Image description

got the flag 🎉
Flag : KashiCTF{3V4L_41NT_54F3_53wQLCc7}

2. Final Game?

Image description

Go to the link, then choose study

Image description

then copy the pgn.

Image description

After that, go to this website https://incoherency.co.uk/chess-steg/

Image description

paste the pgn then Unsteg.

Image description

got the flag 🎉
Flag : KashiCTF{Will_This_Be_My_Last_Game_e94fab41}

Top comments (0)