HTB - Pwn: TicTacToed

Challenge Summary

  • Name: TicTacToed
  • Category: Pwn
  • Difficulty: Medium
  • Goal: Unlock the hidden interface, pass authentication, and recover the flag from the embedded C2 workflow.
 

Zero

CTF notes by Zero

Reverse-engineering the hidden Rust auth flow, then hijacking the dropped C2 binary via UAF to execute getSecret and recover the flag.

2026-02-26

Tags

#ctf #htb #pwn