Web Application Security
Web
Server-side web challenges: SQL injection, authentication bypass, JWT algorithm confusion and forgery, insecure uploads, and multi-stage exploit chains ending in code execution.
- OnboardX OnboardX is an employee-onboarding portal. New self-registered accounts are "pending HR approval"; approved employees get a JWT (token cookie, RS256 via JWKS); an HR/admin panel generates employee ID cards by running ImageMagick on an…
- TrollClock A Node/Express + ws app. The page shows a fake "one-time code" clock and claims a new challenge is issued every 37 seconds. The flag arrives over a WebSocket. The tagline is the hint: there are several dead-ends/decoys layered on top of…
- The Dragon Warrior A Kung-Fu-Panda-themed React (Vite) front end talking to a FastAPI backend under /api. The flag lives at GET /api/scroll, which only opens to a player whose rank == "dragon-warrior". Rank is granted by POST /api/dragon-seal/certify, which…
- DevNote DevNote is a tiny Flask app with a login page and a dashboard. The login page leaks guest credentials in an HTML comment. Once logged in, the dashboard exposes an internal "Dev Query Interface" at /dashboard?q= that drops the q parameter…
No write-ups match your filter.