CTF-2021

CTF-2021 Notes This CTF is not using DB for authentication. In addition to that, this CTF generates static tokens because of the following: 1. Minimize the chances of a user solving this CTF in a different way 2. Minimize the chances of a user missing hints by modifying or bypassing web...

Metasploit Wrap-Up

Self-Service Remote Code Execution This week, our own @wvu-r7 added an exploit module that achieves unauthenticated remote code execution in ManageEngine ADSelfService Plus, a self-service password management and single sign-on solution for Active Directory. This new module leverages a REST API...