[HackIM 2016] [Web 400 – SmashTheState] Write UpThis beautiful website for testing zip files contains a replica of a vulnerability found in a well known bug bounty site.
Log in with rob:smashthestate then exploit the vulnerability to gain access to the ‘admin’ account and the flag.
Automated tools and bruteforcing will not help you solve this challenge.
Continue reading [HackIM 2016] [Web 400 – SmashTheState] Write Up
[HackIM 2016] [Trivia Question 3] Write UpBill Gates loves Cipher.
[HackIM 2016] Back on the eventHello buddies!
The HackIM has just ended.
We finished 61th 37th over 560 535 actives teams.
This year (again) the CTF has been f*cked with corruption : sharing flags between Indian teams and DDoSing to block submissions…
[9447 CTF 2015] [Stega 90 – Imaged] Write UpOur spies found this image. They think something is hidden in it… what could it be?
imaged.zip
Continue reading [9447 CTF 2015] [Stega 90 – Imaged] Write Up
[9447 CTF 2015] [Web 130 – YWS] Write UpMy friend wrote a cool web server. I’m sure he’s stored some great doxxxs on the website. Can you take a look and report back any interesting things you find?
The web page is at http://yws-fsiqc922.9447.plumbing
