
PatriotCTF 2024 Web Kiran Sau Problem
TLDR ACL Misconfigure -> YAML input issue ![[Pasted image 20240927024141.png]] Part 1 # create .htpasswd file RUN htpasswd -bc /etc/apache2/.htpasswd admin TEST_PASSWORD index.php have nothing...
TLDR ACL Misconfigure -> YAML input issue ![[Pasted image 20240927024141.png]] Part 1 # create .htpasswd file RUN htpasswd -bc /etc/apache2/.htpasswd admin TEST_PASSWORD index.php have nothing...
TLDR Techniques CTRL + s CTRL + o CTRL + p Windows + r CTRL + SHIFT + Escape (Task Manager) runas /user:admin cmd.exe (For Priv Esc if admin pass is known) Setup Messing With F1 button M...
Quick dirty bash script that generate list of possible usernames based on given full name Example of accepted full name : John Jammond John.Jammond #!/bin/bash # Check for help flag or inc...
The Story Another week , another ctf , this time i was abit occupied with some issues , only managed to join after the CTF ended. TLDR 404 -> XSS -> Bypass CSP -> CSRF index.html <scri...
The Story So.. This weekend my friend , Alvin decided to pull me back into playing web ctf and knowing that i am quite washed , i decided to give it a go and the rest is history below. TLDR Reflect...
So.. I was looking for a fast port scanner , and came across many different port scanner such as rustscan , masscan , zenmap but ultimately most port scanner uses almost same function as nmap. The...