Web Exploitation 66
- 2024 LACTF - terms-and-conditions
- 2024 LACTF - penguin-login
- 2024 LACTF - flaglang
- 2023 BackdoorCTF - too-many-admins
- 2023 BackdoorCTF - secret_of_j4ck4l
- 2023 BackdoorCTF - php_sucks
- 2023 CakeCTF - Country DB
- 2023 TSGCTF - Upside down cake
- 2023 ISITDTUCTF - Quibuu
- 2023 BKCTF - Metadata checker
- 2023 LITCTF - Ping Pong
- 2023 LITCTF - Ping Pong Under Maintenance
- 2023 corCTF - msfrognymize
- 2023 corCTF - force
- 2023 ImaginaryCTF - roks
- 2023 ImaginaryCTF - perfectpicture
- 2023 ImaginaryCTF - idoriot
- 2023 ImaginaryCTF - idoriot revenge
- 2023 ImaginaryCTF - blank
- Change your browser
- Authentication
- Weak password
- SQL injection - Authentication
- Python - Server-side Template Injection Introduction
- PHP - Filters
- Local File Inclusion
- JWT - Introduction
- Install files
- HTTP - Verb tampering
- HTTP - User-agent
- HTTP - POST
- HTTP - Open redirect
- HTTP - Improper redirect
- HTTP - IP restriction bypass
- HTTP - Headers
- HTTP - Directory indexing
- HTTP - Cookies
- HTML - Source code
- File upload - Double extensions
- Directory traversal
- CRLF
- Backup file
- Javascript - Webpack
- Javascript - Source
- Javascript - Obfuscation 3
- Javascript - Obfuscation 2
- Javascript - Obfuscation 1
- Javascript - Native code
- Javascript - Authentication
- Javascript - Authentication 2
- HTML - disabled buttons
- sql injection bypass WAF
- simple_sqli
- session-basic
- php-1
- pathtraversal
- image-storage
- file download 1
- error based sqli
- devtools-sources
- csrf-1
- cookie
- command-injection-1
- blind sql injection advanced
- baby-union
- Carve Party