DreamHack - weblog-1 Web Challenge Write-up
Analyze the given code and logs to find answers that correspond to the given questions.
DreamHack - Client Side Template Injection Web Challenge Write-up
This is an exercise in Client Side Template Injection.
DreamHack - file-csp-1 Web Challenge Write-up
Flags can be obtained by writing CSP according to the conditions required by the question.
DreamHack - web-deserialize-python Web Challenge Write-up
This service implements Session Login. Use the Deserialize vulnerability in Python (pickle) to obtain flags. The flags are in flag.txt or the FLAG variable.
DreamHack - baby-sqlite Web Challenge Write-up
This is a login service. Get a flag through the SQL INJECTION vulnerability!
DreamHack - sql injection bypass waf Advanced Web Challenge Write-up
Patched issue with SQL Injection Bypass WAF.
DreamHack - login-1 Web Challenge Write-up
A service with a login function written in python. Obtain a flag by logging in as a user with “admin” rights.
DreamHack - funjs Web Challenge Write-up
This is an HTML page that inputs data into an input form and outputs a flag if it is correct and a flag if it is wrong. NOP ! Analyze the main function to find the correct input values!
DreamHack - blind-command Web Challenge Write-up
Read the flag file XD
DreamHack - web-ssrf Web Challenge Write-up
This is an image viewer service written in Flask. Use SSRF vulnerabilities to obtain flags. The flag is /app/flag.txt located at.