BabyJS - 2020 Defenit CTF Az3z3l 2020-06-10 Web Exploitation tl;dr Accessing a variable in Handlebars template using this object Read More Defenit Handlebars template injection Ssti
TarAnalyzer - 2020 Defenit CTF c3rb3ru5 2020-06-07 Web Exploitation tl;dr Zip Slip Vulnerability + YAML Deserialization Attack + Race Condition Unintended Solution: Upload symlink leading to arbitarary file reads Read More Defenit YAML Zip Slip Race Condition Symlink
USB 2 - 2020 Defenit CTF stuxn3t 2020-06-07 Forensics / Registry tl;dr Digging into windows registry to find process run counts. Extracting and parsing AmCache to find the hash of process images Read More Windows Registry Analysis Defenit