Welcome to the third year of Sunshine CTF, hosted by Hack@UCF (the Collegiate Cyber Defense Club @ UCF) in affiliation with B-Sides Orlando 2018. We've created challenges around this year's theme: steampunk. Be prepared to tinker with the gears of how technologies work.

Remote participants are allowed and encouraged, however the winning team must be present at B-Sides Orlando 2018 to be presented with a trophy at closing ceremonies.

When (UTC): Thu, 05 April 2018, 20:00 UTC — Sat, 07 April 2018, 20:00 UTC
When (EST): Thu, 05 April 2018 4:00 PM EST — Sat, 07 April 2018, 4:00 PM EST
CTF Type: Jeopardy
Categories: Pwn, RE, Web, Forensics, Crypto, Scripting
Flag Format: sun{stuff}

How to run Pwn challenges:

All of our challenges in the Pwn category use the PwnableHarness framework. In the challenge descriptions, there will be links to each of the files involved in the challenge. This will always include the binary itself and the version of libpwnableharness it requires (32-bit or 64-bit). To run a challenge binary, first download both it and the provided libpwnableharness to a Linux environment such as an Ubuntu VM. Then, make them both executable with the commands chmod +x binary_name_here and chmod +x libpwnableharness(32 or 64).so. Finally, you can run the challenge binary normally like ./binary_name_here.

Contact Us:

Tweet us @HackUCF. Use the hashtag #sunshinectf.
IRC: #sunshinectf on Freenode

Sponsors:


Thank you to Sobe Research Group for sponsoring our third year of SunshineCTF!

Updates:

  • Due to team registration spam, we now require email validation. We have sent out validation emails to all currently registered teams.

  • 2018-04-04 23:05 UTC - We have just resent all verification emails from a new email address, noreply (at) mg (dot) sunshinectf (dot) org. Please use the new link in there to verify your account!

  • 2018-04-05 16:58 UTC - Verification emails are a little slow right now, please wait at least 10 minutes before resending the verication emails!

  • 2018-04-05 21:50 UTC - CTFd site is back up, SunshineCTF is a GO!

  • 2018-04-05 22:10 UTC - Released 300 point Scripting challenge "WorkshopHelper"!

  • 2018-04-05 22:55 UTC - Released 50 point Web challenge "Evaluation"!

  • 2018-04-05 23:12 UTC - Increased point value of "Order Matters" challenge from 150 -> 250!

  • 2018-04-05 23:16 UTC - Released 100 point Web challenge "Marceau"!

  • 2018-04-05 23:16 UTC - Released 200 point Web challenge "Home Sweet Home"!

  • 2018-04-05 23:45 UTC - Increased point value of "Old Favorites" challenge from 50 -> 150!

  • 2018-04-05 23:45 UTC - Increased point value of "Old Favorites 2" challenge from 150 -> 300!

  • 2018-04-06 00:12 UTC - Fixed Web 200 "Home Sweet Home" challenge, use the new URL!

  • 2018-04-06 00:15 UTC - Released 100 point Web challenge "Search Box"!

  • 2018-04-06 00:20 UTC - Hint released for "Marceau"!

  • 2018-04-06 01:15 UTC - Challenge "Evaluation" is back online!

  • 2018-04-06 01:55 UTC - Increased point value of "Search Box" challenge from 100 -> 200!

  • 2018-04-06 01:55 UTC - Decreased point value of "Home Sweet Home" challenge from 200 -> 150!

  • 2018-04-06 05:35 UTC - Corrected port of "BookWriter" challenge and recompiled binary!

  • 2018-04-06 18:00 UTC - Modified "Missing Bytes" challenge by decreasing number of rounds required from 30 -> 20 and doubled the time limit!

  • 2018-04-06 18:00 UTC - Modified "Workshop Helper" challenge by correcting time limit calculation!

  • 2018-04-06 18:50 UTC - Modified "Book Writer" challenge. Binary, source, and libpwnableharness were modified, it should work on remote now!

  • 2018-04-06 19:15 UTC - Increased point value of "Order Matters" challenge from 250 -> 350!

  • 2018-04-06 19:20 UTC - Increased point value of "Search Box" challenge from 200 -> 250!

  • 2018-04-06 19:22 UTC - Increased point value of "Old Favorites 2" challenge from 300 -> 450!

  • 2018-04-07 00:02 UTC - Hint released for "Order Matters"!

  • 2018-04-07 02:02 UTC - Increased point value of "Visionary" challenge from 100 -> 150!

  • 2018-04-07 02:08 UTC - Released 100 point Crypto challenge "Bomba"!

  • 2018-04-07 13:47 UTC - Modified "Bomba" challenge by changing the ciphertext to fix an off-by-one error, please use the new one!

  • 2018-04-07 16:25 UTC - Released 150 point Pwn challenge "Log Search"! No more challenges will be released!