In this repo I will share my learnings and solutions to practice challenges in HOH Let's Move CTF Bootcamp.
The course can be found on BiliBili and Web Tutorial (Chinese).
Follow the official documentation to install Sui Client CLI and have wallets ready for use on Testnet.
The 4-week learning mainly focused on these areas:
- General knowledge of Sui Move, syntax, how to deploy a contract etc.
- Basic interaction with Sui blockchain on Testnet
- Identify basic vulnerabilities in smart contracts and write solver contracts to interact and claim flag
- Vulnerabilities about Sui Move Generics (e.g.
<phantom T>
) - Vulnerabilities about resource management and ownership
- Vulnerabilities about access control (e.g.
TxContext
) - Vulnerabilities about logic bugs
- Use PTB (Programmable Transaction Blocks) to interact with Sui Move
- Chaining vulnerabilities to solve challenges: scenarios and defense