CTF Writeups
Event CTFs and challenge writeups — web, pwn, crypto, forensics, misc.
-
gulltown
A cargo manifest form, an unquoted shell variable, and a SUID binary that trusts PATH. Flask web app on one port. A subtle injection in the weight parameter, not the one you’d guess first. A custo...
-
ad-lanfeust
From a PDF form to two forests. A customs declaration form. That’s where this started. By the end I was root on a Linux box in a second Active Directory forest I’d never directly touched. In betwe...