securitytaters

Solving Epic Admin PWN from UTCTF 2020

Posted on Mon 09 March 2020 in CTF by 0xm4v3rick • Tagged with webappsec, sql injection, writeup, sqlmap

SQL injection involving PostgreSQL. Blind SQLi with stacked Queries.

Posted on Mon 09 March 2020 in CTF by 0xm4v3rick • Tagged with webappsec, XXE, writeup

XXE challenge that involved using already available XML tag

Posted on Mon 03 February 2020 in CTF by 0xm4v3rick • Tagged with webappsec, race condition, turbo intruder, writeup

This was the fastest challenge I have solved till now. Simple race condition leading to extra money and the flag.

Posted on Sat 21 December 2019 in CTF by 0xm4v3rick • Tagged with webappsec, sql injection, writeup

Execute No Evil was another challenge, simple yet pain. Read about it here.

Posted on Sat 21 December 2019 in CTF by 0xm4v3rick • Tagged with webappsec, auth bypass, writeup

Solving this ctf was quite a fun for me. Go ahead to read about it.