Jax Dunfee ctfs

I specialize in pwn and blockchain challenges

I've been creating CTF challenges for a while now, primarily focusing on web and pwn categories, though I occasionally develop challenges in other areas as well.

SparkCTF 2024


Skip, and away! (pwn)

A binary exploitation challenge that leverages undefined behavior in setjmp() and longjmp() functions to bypass protections and achieve code execution - Writeup

cr3 CTF 2024


secretclub (web)

A web challenge involving hidden Express.js functionality that can be exploited to bypass internal security checks and achieve XSS for privilege escalation - Writeup

PatriotCTF 2023


Pick Your Starter (web)

A web application vulnerable to blind Server-Side Template Injection that can be exploited for remote code execution - Writeup

Guessing Game (pwn)

A classic buffer overflow vulnerability that requires careful exploitation to gain control of program execution and retrieve the flag - Writeup

Wing it (rev)

A beginner friendly reverse engineering challenge that introduces fundamental concepts of reverse engineering - Writeup

Uh Oh! (misc)

A regex-focused challenge that tests pattern matching skills and knowledge of regular expression syntax - Writeup