Web Exploitation

GET aHEAD [20 pts] [Not Solved]

Solution

a

Flag:

Cookies [40 pts] [Not Solved]

Solution

a

Flag:

Scavenger Hunt [50 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 1 [70 pts] [Not Solved]

Solution

a

Flag:

More Cookies [90 pts] [Not Solved]

Solution

a

Flag:

It is my Birthday [100 pts] [Not Solved]

Solution

a

Flag:

Who are you? [100 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 2 [110 pts] [Not Solved]

Solution

a

Flag:

Super Serial [130 pts] [Not Solved]

Solution

a

Flag:

Most Cookies [150 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 3 [160 pts] [Not Solved]

Solution

a

Flag:

Web Gauntlet 2 [170 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 4 [200 pts] [Not Solved]

Solution

a

Flag:

X marks the spot [250 pts] [Not Solved]

Solution

a

Flag:

Web Gauntlet [300 pts] [Not Solved]

Solution

a

Flag:

Bithug [500 pts] [Not Solved]

Solution

a

Flag:

PreviousCryptography NextHackiHoli

Last updated 3 years ago

Was this helpful?

GET aHEAD [20 pts] [Not Solved]

Solution

a

Flag:

Cookies [40 pts] [Not Solved]

Solution

a

Flag:

Scavenger Hunt [50 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 1 [70 pts] [Not Solved]

Solution

a

Flag:

More Cookies [90 pts] [Not Solved]

Solution

a

Flag:

It is my Birthday [100 pts] [Not Solved]

Solution

a

Flag:

Who are you? [100 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 2 [110 pts] [Not Solved]

Solution

a

Flag:

Super Serial [130 pts] [Not Solved]

Solution

a

Flag:

Most Cookies [150 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 3 [160 pts] [Not Solved]

Solution

a

Flag:

Web Gauntlet 2 [170 pts] [Not Solved]

Solution

a

Flag:

Some Assembly Required 4 [200 pts] [Not Solved]

Solution

a

Flag:

X marks the spot [250 pts] [Not Solved]

Solution

a

Flag:

Web Gauntlet [300 pts] [Not Solved]

Solution

a

Flag:

Bithug [500 pts] [Not Solved]

Solution

a

Flag:

I forgot Cookies can Be modified Client-side, so now I decided to encrypt them!

I sent out 2 invitations to all of my friends for my birthday! I'll know if they get stolen because the two invites look similar, and they even have the same md5 hash, but they are slightly different! You wouldn't believe how long it took me to find a collision. Anyway, see if you're invited by submitting 2 PDFs to my website.

Let me in. Let me iiiiiiinnnnnnnnnnnnnnnnnnnn

Try to recover the flag stored on this website

Alright, enough of using my own encryption. Flask session cookies should be plenty secure!

This website looks familiar... Log in as admin Site: Filter:

Another login you have to bypass. Maybe you can find an injection that works?

Last time, I promise! Only 25 characters this time. Log in as admin Site: Filter:

Code management software is way too bloated. Try our new lightweight solution, BitHug. Source:

http://mercury.picoctf.net:53554/

http://mercury.picoctf.net:6418/

http://mercury.picoctf.net:27278/

http://mercury.picoctf.net:1896/index.html

http://mercury.picoctf.net:25992/