google/google-ctf

Google CTF

Google CTF

This repository lists most of the challenges used in the Google CTF since 2017, as well as most of the infrastructure that can be used to run them. IMPORTANT - The code in the 201x and 202x folders have unfixed security vulnerabilities. These are there on purpose, and running these on real production infrastructure is not safe.

Read more about the Google CTF here: https://security.googleblog.com/2017/06/announcing-google-capture-flag-2017.html

Note this is not an official Google product.

google-ctf's Issues

it can't run

Google ctf 2020 log me in，how to run it,i did all the things in the follow requests

Security Policy violation Binary Artifacts

This issue was automatically created by Allstar.

Security Policy Violation
Project is out of compliance with Binary Artifacts policy: binaries present in source code

Rule Description
Binary Artifacts are an increased security risk in your repository. Binary artifacts cannot be reviewed, allowing the introduction of possibly obsolete or maliciously subverted executables. For more information see the Security Scorecards Documentation for Binary Artifacts.

Remediation Steps
To remediate, remove the generated executable artifacts from the repository.

First 10 Artifacts Found

• 2017/finals/2017-finals-misc-jail1/init
• 2017/finals/2017-finals-misc-jail1/jail
• 2017/finals/2017-finals-misc-turing/attachments/verifier.out
• 2017/finals/2017-finals-pwn-hyperion/attachments/hyperion_server
• 2017/finals/2017-finals-pwn-hyperion/hyperion_server
• 2017/finals/2017-finals-pwn-hyperion/src/SDL2.dll
• 2017/finals/2017-finals-pwn-hyperion/src/hyperion_client.exe
• 2017/finals/2017-finals-pwn-hyperion/src/hyperion_server
• 2017/finals/2017-finals-pwn-superman/attachments/qemu-arm
• 2017/finals/2017-finals-pwn-superman/attachments/superman
• Run a Scorecards scan to see full list.

Additional Information
This policy is drawn from Security Scorecards, which is a tool that scores a project's adherence to security best practices. You may wish to run a Scorecards scan directly on this repository for more details.

---

Allstar has been installed on all Google managed GitHub orgs. Policies are gradually being rolled out and enforced by the GOSST and OSPO teams. Learn more at http://go/allstar

This issue will auto resolve when the policy is in compliance.

Issue created by Allstar. See https://github.com/ossf/allstar/ for more information. For questions specific to the repository, please contact the owner or maintainer.

no limitation for "%s" while calling scanf()

google-ctf/2019/beginners/pwn-buffer-overflow/mips_bof_segv.c

Line 69 in a005c28

scanf("%s", input);

Field width in scanf format string may case overflow

When is the CTF 2022 starting?

Infrastructure Scoreboard Setup

I'm trying to run the infrastructure on Firebase as described in the Readme, but I'm getting a goog is not defined from the goog.module() declarations. I don't know enough about Node (Python guy) to understand how this is suppose to work. Any help would be appreciated.

beginners.js:20 Uncaught ReferenceError: goog is not defined
    at beginners.js:20
(anonymous) @ beginners.js:20
database.js:5 Uncaught ReferenceError: goog is not defined
    at database.js:5
(anonymous) @ database.js:5
readme.js:5 Uncaught ReferenceError: goog is not defined
    at readme.js:5
(anonymous) @ readme.js:5
session.js:5 Uncaught ReferenceError: goog is not defined
    at session.js:5
(anonymous) @ session.js:5
tasklist.js:5 Uncaught ReferenceError: goog is not defined
    at tasklist.js:5
(anonymous) @ tasklist.js:5
teamlist.js:5 Uncaught ReferenceError: goog is not defined
    at teamlist.js:5
(anonymous) @ teamlist.js:5
theme.js:6 Uncaught ReferenceError: goog is not defined
    at theme.js:6
(anonymous) @ theme.js:6
ui.js:5 Uncaught ReferenceError: goog is not defined
    at ui.js:5
(anonymous) @ ui.js:5
scoreboard.js:1 Uncaught SyntaxError: Identifier 'Beginners' has already been declared
bootstrap.js:5 Uncaught ReferenceError: goog is not defined
    at bootstrap.js:5

I took the extra step of adding npm install googl and npm install google-closure-library to the dependency, but that didn't fix it. I tried to define it using const goog = require('goog'); as described when adding Firebase Dependencies, but no luck. Now it just says require is not defined

Add License information in README

Add license information in README file.

🚩 thanks for your ctf problems bro and I got the flag lol~

it's just a joke issue lol. . . I’m recently learning about the CTF which is so interesting, thanks for your ctf problems again bro !

google-ctf/2020/quals/web-log-me-in/app/app.js

Line 26 in 2d2e64a

const flagValue = "CTF{a-premium-effort-deserves-a-premium-flag}"

MathSh challenge writeup

Hi, is there going to be a write-up for the 2020 sandbox challenge MathSh, too?

Sources for Google CTF 2016

Hello, where can I get the source code for the challenges in Google CTF 2016?