noviembre 2013 – Tunelko. Random (in)security.

NotSoSecure SQLi CTF – writeup

Access to challenge using a proxy like burp or zap and submit data to login. Notice the forwarded to: http://ctf.notsosecure.com/71367217217126217712/checklogin.php that contains: 7365637265745f72656769737465722e68746d6c This could be decoded '7365637265745f72656769737465722e68746d6c'.decode('hex') in python to read secret_register.html >>> '7365637265745f72656769737465722e68746d6c'.decode('hex') 'secret_register.html' The registration page offers…

CTF Reversing Wargame

Format string attack. Introduction.

On this post we are going to learn more about format string attacks. On Internet you can find a lot of resources talking about the topic, so this is another one. What is a format string and how to recognize…