traefik-CVE-2024-45410-poc

Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

Pwn ARM NFC

Desafío Desbordamiento de búfer en ARM a través de etiqueta NFC Este proyecto es un desafío de bajo nivel de código abierto y divertido de hacer. Siéntete libre de mejorarlo o usarlo en tus propios proyectos. Cada archivo se distribuye "tal cual" con la esperanza de que sea útil, pero sin ninguna...

ctf-screenshotter

screenshotter web Un desafío web CTF sobre cómo hacer capturas de pantalla. Está inspirado en un error encontrado en la vida real. El desafío fue creado por @LiveOverflow para https://cscg.de/. Mira el video writeup aquí: https://www.youtube.com/watch?v=FCjMoPpOPYI Ejecutar el desafío Para ejecut...

CVE-2022-46169

CVE-2022-46169 POC 用于利用 Cacti 中 CVE-2022-46169 漏洞的概念验证 / CTF 脚本，适用于版本 =1.2.22 此脚本是为解决 CTF 挑战而编写的。 它基于以下示例脚本——我难以理解这些脚本的实际作用，因此重写了我自己的解读版本，这帮助我理解了该漏洞利用的工作原理。 https://github.com/ariyaadinatha/cacti-cve-2022-46169-exploit/blob/main/cacti.py...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

CTF_CVE-2020-7471

DOBBYISFREE! 出题CTF: 2020 Christmas CTF 领域: WEB 关键词: DOBBYISFREE! 难度: ★★★☆☆ 背景 通常Web黑客主要学习MySQL的SQL注入，因此我想使用PostgreSQL制作一个注入问题，让大家体验一下对不同数据库的攻击。 解法 预期解法 由于这是Django服务中出现的漏洞，为了提供相关线索，在HTTP响应中添加了名为Version的自定义头，标明了Django和Postgres的版本。搜索Django 3.0.1版本中出现的SQL注入漏洞时，可以找到公开的PoC代码等。 访问网站时显示文章列表...

OverRide

OverRide Explora desensamblado, explotación binaria e ingeniería inversa a través de 10 pequeños desafíos. En la carpeta de cada nivel encontrarás: flag - contraseña para el siguiente nivel README.md - cómo encontrar la contraseña source.c - el binario con ingeniería inversa dissasemblynotes.md...

CTF-CVE-2019-9053-GTFOBins

CTF, CVE-2019-9053, GTFOBins I utilized the machines on https://tryhackme.com/ and my own Kali on WSL to do this exercise and it is part of the CTF challenge. The following information helped me solved the challenge: vim on https://gtfobins.github.io/gtfobins/vim/ and https://gtfobins.github.io/...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

wargame-turkey_in_2

wargame 1. flag file divide 2. Brute force prevent - delay 50005s 3. logging 4. password hashing -wargame-turkeyin2...

CTF-CVE-2022-0847

Dirty Pipe Deployment For this challenge, you want to overwrtie the "cat.txt" read-only file using CVE-2022-0847 exploit There are many way to do it using the exploit Dependencies Linux Kernel Version 5.8 or later vulnerable gcc GNU Compiler Collection for compiling the exploit code First-Time...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

Next.js-Middleware-Bypass-CVE-2025-29927-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability so Big shout out to zhero & inzo and you can find their blogpost here :...

BlueDoor

BlueDoor Desafío CTF Resumen Nombre del Desafío : BlueDoor CVE : CVE-2017-0144 EternalBlue Dificultad : 3/5 Categoría : Explotación, Windows Autores : Seth Davis BlueDoor simula una vulnerabilidad del mundo real EternalBlue - CVE-2017-0144 en un sistema Windows 7. El objetivo es explotar la...

CrackMeZ3S-CTF-CrackMe-Tutorial

如何为 CTF 竞赛编写一个 CrackMe 随着 CTF（夺旗）竞赛的日益流行， 以及 Dragon Sector 等波兰团队在该领域的出色表现， 我认为展示如何构建一个简单的 CrackMe 会很有趣，其中会用到一些 使其难以破解和分析的创意技术。 如果你曾对逆向工程感到好奇，参加过 CTF 竞赛， 或者想创建自己的 CrackMe 并让其他参赛者抓狂，那么这篇文章就是为你准备的。 英文完整文章 你可以找到一篇关于该 crackme 的文章，其中包含详细的技术描述 和源代码注释（英文），地址为：...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability , i try to make CTF with [email protected] version but when i check...

CVE-2020-9484

CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...

TryHack3M-Bricks-Heist

TryHack3M: Bricks Heist Exploit • Writeup • CTF Challenge A comprehensive repository containing a custom exploit and detailed writeup for the TryHack3M: Bricks Heist challenge Quick Start • Repository Structure • The Exploit • The Writeup • Disclaimer Overview This repository documents the...