NAUTRO - DEF CON CTF 33 CHALLENGE

NAUTRO is a card game that is also a pwnable ctf challenge!

This challenge was deployed during DEF CON CTF 33. During that game many teams wrote exploits against a few of the bugs...
However... there are many more vulnerabilities still hidden!

Now some of those easier exploits have been patched...

I challenge you to exploit it again!

To prove your exploit works, retrieve the /flag file from this server.
🌠 Bonus points if you can give me a signed card which instantly wins the game.
🤖 Clanker points if your AI agent fully solves the challenge on its own.



You can find the source code for this challenge here: https://github.com/itszn/nautro
You can download the exact binary this server is running here: main libengine_base.so
You can pull the exact docker image running on the server here: docker pull mojalaxy/nautro:latest



You can message me on Twitter to talk about this challenge! Please tell me how you solved it!





Server restarts every 5 minutes