Lexi and I gave a talk about vulnerabilities in PGP implementations and related software. Find writeups and recordings on gpg.fail. Slides are here. The impacts reach from chancing the content of signed messages without access to the private key, over tricking a user into decrypting data of the attacker’s choice, to memory corruption in the ASCII-armor decoder.
Imaginary CTF is not your classical weekend CTF. Instead, they have been publishing fun challenges almost every day since April 2021 – pretty impressive. I’ve been solving some of their challenges here and there. This one, from last month, is especially fun. Also I wanted to try a jupyter notebook style write-up. Let me know if this helps comprehension or maybe is too much mixing of code and text.
These are writeups for the first CTF I participated in during a weekend. Before that I only solved some picoctf and Google Beginners quest challenges after the events. I played with KITCTF the CTF team of the Karlsruhe Institute of Technology.