CTF Write-ups
CTF Write-ups
Solutions and walk-throughs from Capture the Flag challenges. Filter by category or difficulty, or search by title, event, or tag.
A classic authentication bypass — the login form builds its query with unsanitised string concatenation, so a crafted username logs us in as admin.
read write-up →