BroncoCTF: Lovely Login
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login. The obvious attack surface — NoSQL operator injection on username/password — turned o
Jul 12, 20265 min read17
Command Palette
Search for a command to run...
#bronoctf-writeup
Articles tagged with #bronoctf-writeup
BronoCTF : No Laughing Matter
Challenge A single file, aha.txt, containing nothing but space-separated 8-letter "words" made up of only two characters: A and H. $ cat aha.txt AHHAAAHA AHHHAAHA AHHAHHHH AHHAHHHA AHHAAAHH AHHAHHHH A
Jul 12, 20262 min read14
BroncoCTF : Bundle Writeup
Summary A .kra-adjacent artifact named Bundle_99 is handed off for analysis. It turns out to be a Krita resource bundle (.bundle) — a plain ZIP archive containing a brush preset (Brush 99.kpp). The .k
Jul 12, 20265 min read2
BroncoCTF : Magic Ways Writeup
Executive Summary challenge.png was a PNG file that had been deliberately mangled at the byte level so that neither the OS, exiftool, nor pngcheck would recognize it as a valid image. The fix required
Jul 12, 20266 min read
BroncoCTF : The KeyMaster Writeup
Challenge No file, no binary — just a URL: https://broncosec.com/BroncoCTF The flag format is given as bronco{XXXX...}. Nothing else. This is an OSINT / web-recon style challenge: the flag is broken
Jul 12, 20265 min read9
BronoCTF : LEts a GO Writeup
Category: Forensics / Misc Difficulty: Easy Flag: bronco{3ve4yth1ng_1s_aw3s0me} Challenge We're given lego_bricks_challenge.zip, a 63 KB archive. $ zipinfo lego_bricks_challenge.zip Archive: lego_bri
Jul 12, 20264 min read4