[Defcamp Quals 2025] [Web 95 – jargon] Write UpThis ticketing platform looks like it was built back in the late ’90s, yet somehow it’s still running in 2025. Many of the flaws it carries are relics of an older era of the web. The question is: can you still exploit these outdated systems today, or has old-school web exploitation become harder in the modern landscape?
Continue reading [Defcamp Quals 2025] [Web 95 – jargon] Write Up
[Defcamp Quals 2024] [WEB/CRYPTO – Oracle-SRL] Write Up[ 5 aug 2024 ] Just finished my ecommerce website. It took quite a lot of time because I wanted to make sure it’s extra secure, I’m sure it will get some traction. I’m so excited!
[ 20 aug 2024 ] The website isn’t picking up as i hoped it would, but I’m still optimistic
[ 13 sep 2024 ] The store is a complete bust and there is this annoying customer that keeps on checking my store every other damn minute but doesn’t buy anything.
[ 13 sep 2024 ] JUST BUY SOMETHING!
Flag format: CTF{sha256}
Files : source-oracle-srl.zip
Continue reading [Defcamp Quals 2024] [WEB/CRYPTO – Oracle-SRL] Write Up
[Defcamp Quals 2024] [WEB – production-bay] Write UpSome powerful proxy protects our cat factory production bay, but the strange thing is that we edited some nginx config in the platform to protect our /flag route, and things do not look as secure as expected.
Flag format: ctf{sha256sum}
Continue reading [Defcamp Quals 2024] [WEB – production-bay] Write Up
[Defcamp Quals 2024] [WEB – REELFREAKS] Write UpSome things are better to remain unseen. Unless, of course, you are a real freak.
NOTE: the website is served over HTTPS
Flag format: DCTF{}
Files : dctf_web_reelfreaks.zip
Continue reading [Defcamp Quals 2024] [WEB – REELFREAKS] Write Up
[Defcamp Quals 2024] [PWN – ftp-console] Write UpWe got a very strange ftp console? Can you retrive the flag?
Flag format: ctf{sha256sum}
Files : ftp_server
Continue reading [Defcamp Quals 2024] [PWN – ftp-console] Write Up
