Tag: web
-
Performing Supply-Chain Attack in the NodeJS Ecosystem [hands-on exercise] (14 Sep 2024)
-
Finding RCE in NodeJS templating engine 'Eta' - CVE-2022-25967 (01 Apr 2023)
-
Uni CTF 2022: UNIX socket injection to custom RCE POP chain - Spell Orsterra
(30 Dec 2022)
-
Business CTF 2022: Chaining Self XSS with Cache Poisoning - Felonious Forums
(18 Nov 2022)
-
Business CTF 2022: H2 Request Smuggling and SSTI - Phishtale
(17 Nov 2022)
-
CA CTF 2022: Exploiting Redis Lua Sandbox Escape RCE with SSRF - Red Island
(10 Jun 2022)
-
CA CTF 2022: Exploiting Zip Slip and Pickle Deserialization - Acnologia Portal
(06 Jun 2022)
-
CA CTF 2022: Exploiting LFR and forging Cookies - Mutation Lab
(03 Jun 2022)
-
Gears of web exploits that sync in harmony; SteamCoin write-up from HTB University CTF 2021
(14 Dec 2021)
-
HackTheBox CyberApocalypse CTF 21 write-up (24 Apr 2021)