Web Security
Bugforge.io Gift Lab Walkthrough
A gift-list app's "share link" turns out to be raw Base64 of a sequential list ID — enumerating tokens to access other users' private gift lists.
Web Security
Dive into the world of web security, where we explore cutting-edge techniques to protect online platforms and digital infrastructure. This blog covers essential topics like vulnerability management, secure web development, and defense strategies against the latest cyber threats. Stay ahead of evolving threats with actionable advice and best practices to ensure robust web security.
Web Security
Bugforge.io CopyPasta Walkthrough
Chaining an IDOR on the profile endpoint with a broken authorization check on password changes to take over an admin account and grab the flag.
Infrastructure
Simple Way to Lockdown Your Website with Cloudflare Access
Do you have a web application running on Docker? Maybe you found an open-source app on GitHub but aren’t quite sure how secure the application is or if it’ll even stay that way in the future. Maybe your app doesn't have features like MFA, and you don’t want to make any changes to the code...
Web Security
PortSwigger Academy - User Role Controlled by Request Parameter
This lab has an admin panel at /admin, which identifies administrators using a forgeable cookie. Solve the lab by accessing the admin panel and using it to delete the user carlos. You can log in to your own account using the following credentials: wiener:peter
Web Security
PortSwigger Academy - Unprotected Admin Functionality
This lab has an unprotected admin panel. Solve the lab by deleting the user carlos.
Web Security
PortSwigger Academy - Authentication Bypass via Information Disclosure
This lab's administration interface has an authentication bypass vulnerability, but it is impractical to exploit without knowledge of a custom HTTP header used by the front-end.
Web Security
PortSwigger Academy - Source Code Disclosure via Backup Files
This lab leaks its source code via backup files in a hidden directory. To solve the lab, identify and submit the database password, which is hard-coded in the leaked source code.
Web Security
PortSwigger Academy - Information Disclosure on Debug Page
This lab contains a debug page that discloses sensitive information about the application. To solve the lab, obtain and submit the SECRET_KEY environment variable.
Web Security
PortSwigger Academy - Information Disclosure in Version Control History
This lab discloses sensitive information via its version control history. To solve the lab, obtain the password for the administrator user then log in and delete the user carlos.
Web Security
PortSwigger Academy - Information Disclosure in Error Messages
This lab's verbose error messages reveal that it is using a vulnerable version of a third-party framework. To solve the lab, obtain and submit the version number of this framework.
Administration
Generating a modern, secure, and widely supported public/private key pair with ECDSA
Recommended steps for generating a modern, secure, and widely supported public/private key pair using ECDSA
Guides
Setting Up Multiple CTFd Instances with Docker, Digital Ocean, and Cloudflare
Our first dive into docker, challenges and lessons learned, a full guide on infophreak's CTFd infrastructure. - Blog by SH3LL