> For the complete documentation index, see [llms.txt](https://ctf.zeyu2001.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ctf.zeyu2001.com/2023/hxp-ctf.md).

# hxp CTF

Won this CTF together with friends from [Blue Water](https://ctftime.org/team/205897) (Perfect Blue + Water Paddler).

<figure><img src="/files/Ddztkl9J4yKvVAouqyCV" alt=""><figcaption></figcaption></figure>

We solved all the Web challenges in this CTF. All of them, except for *valentine*, were clone-to-pwn challenges requiring us to find a 0day in an open-source web application.

| Challenge                                                 | Category | Target                                                              |
| --------------------------------------------------------- | -------- | ------------------------------------------------------------------- |
| valentine                                                 | Web      | [ejs](https://github.com/mde/ejs)                                   |
| archived                                                  | Web      | [Apache Archiva](https://github.com/apache/archiva)                 |
| sqlite\_web                                               | Web      | [sqlite-web](https://github.com/coleifer/sqlite-web)                |
| [true\_web\_assembly](/2023/hxp-ctf/true_web_assembly.md) | Web      | [AsmBB](https://board.asm32.info/asmbb-v2-9-has-been-released.328/) |