Stemba CTF Writeups is technical documentation detailing exploit methods, solution paths, and forensic analyses for challenges featured in the Stemba CTF competition.
Overview
This repository provides step-by-step documentation for solving competitive security challenges organized at SMK Negeri 7 Semarang. Each writeup walks through vulnerability discovery, exploitation methodology, proof of concept (PoC) scripts, and flag extraction.
Categories Covered
- Web Exploitation — Analysis and exploitation of application vulnerabilities including authentication bypasses and parameter tampering.
- Cryptography — Decryption of ciphertexts, frequency analysis, and identification of custom encryption schemes.
- Digital Forensics — Inspection of file metadata, packet captures, and extraction of hidden payloads.
- Logic & Scripting — Automated brute-forcing, socket communication, and algorithmic challenge solvers.
Methodology & Tools
- Operating Environment — Kali Linux, Ubuntu WSL
- Analysis Tools — Burp Suite, CyberChef, Wireshark, John the Ripper
- Scripting — Python (pwntools, requests), Bash
Compiled to share technical methodology and support continuous learning in offensive security.