2017from public repositories
400 A world without JS vendor 2017
11 challenges with 11 published solutions between them. The writeups for this event were found in public repositories. Each link is pinned to the commit it was read from.
Where these writeups liveWeb11
Reach data or functionality the application meant to keep from you - through its inputs, its tokens, or its trust in the client.
Solve it with:JWT decoder and signature verifierJWT alg=none bypass generatorWeb attack payload catalogJWT secret brute forceLearn: Sessions, tokens and access control
Also written up in: GreHack/CTF-challs
CascadingLoaderTest
1 official solutionAlso written up in: GreHack/CTF-challs
Constant Time Encoding
1 official solutionAlso written up in: GreHack/CTF-challs
Easydb
1 official solutionAlso written up in: GreHack/CTF-challs
EngineTest
1 official solutionAlso written up in: GreHack/CTF-challs
HigherOrderSectionsTest
1 official solutionAlso written up in: GreHack/CTF-challs
InheritanceTest
1 official solutionAlso written up in: GreHack/CTF-challs
InlineLoaderTest
1 official solutionAlso written up in: GreHack/CTF-challs
Mustache
1 official solutionAlso written up in: GreHack/CTF-challs
PartialLambdaIndentTest
1 official solutionAlso written up in: GreHack/CTF-challs
TokenizerTest
1 official solutionAlso written up in: GreHack/CTF-challs