Solutions and detailed writeups for challenges solved during TrustCTF 2025 (IITB CTF).
- NOOb Randomness — Known-plaintext attack on a weak byte-wide LCG stream cipher
- GOREY — Go binary maze solver with non-standard movement (±2 steps)
- Secure API — HTTP Parameter Pollution exploit to bypass authorization and access admin balance
- Breached — Database enumeration and HMAC-based flag recovery from breached admin account
- Ghidra — Binary decompilation and reverse engineering
- Python 3 — Scripting, cryptanalysis, maze solving (BFS), CSV parsing, HTTP requests, HMAC computation
- curl — API testing, exploitation, and database downloads
- strings — Binary analysis and maze data extraction
- bash/sed/grep — Input formatting, text processing, and automation scripting
See LICENSE for details.