4. Task (P3) SECTION 9: Bypassing Web Application Protections There won’t be any protection(s) deployed on the target side in an ideal scenario, thus not preventing automatic exploitation. Otherw...

3. Task (P2) SECTION 6: Attack tunning Every payload sent to the target consists of: vector (e.g., UNION ALL SELECT 1,2,VERSION()): central part of the payload, carrying the useful SQL code t...

2. Task Prefix/Suffix There is a requirement for special prefix and suffix values in rare cases, not covered by the regular SQLMap run. For such runs, options --prefix and --suffix can be used a...

2. Task SECTION 2: Detection Question 1 Try adding any of the injection operators after the ip in IP field. What did the error message say (in English)? Please match the requested format. S...

2. Task SECTION 2: Absent Validation Question 1 Try to upload a PHP script that executes the (hostname) command on the back-end server, and submit the first word of it as the answer: ng-23965...

2. Task SECTION 3: Brute force attack Possible Combinations = Character Set Size^Password Length Question 1 After successfully brute-forcing the PIN, what is the full flag the script returns?...

2. Task SECTION 3: Identifying SSRF Question 1 Exploit a SSRF vulnerability to identify an internal web application. Access the internal application to obtain the flag. Access website Clic...

2. Task SECTION 3: Enumerating users User Enumeration Theory Protection against username enumeration attacks can negatively impact user experience. A web application that reveals whether a usern...

2. Task SECTION 3: Bypassing basic authentication Question 1 Try to use what you learned in this section to access the ‘reset.php’ page and delete all files. Once all files are deleted, you sh...

Hello world, this is my first personal blog post. This space will host my CTF writeups, pentest projects, and security research notes.