Next.js-Middleware-Bypass-CVE-2025-29927-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability so Big shout out to zhero & inzo and you can find their blogpost here :...

CVE-2021-4034-CTF-writeup

CVE-2021-4034-CTF-writeup This is a CTF pwn challenge that I wrote in C which requires the user to exploit the CVE-2021-4034 vulnerability. Players are given 2 binaries in the challenge directory in this repo. The chal binary implements the CTF challenge and the shelly.so is a helper binary. How ...

ctf-screenshotter

screenshotter web A CTF web challenge about making screenshots. It is inspired by a bug found in real life. The challenge was created by @LiveOverflow for https://cscg.de/. Watch the video writeup here: https://www.youtube.com/watch?v=FCjMoPpOPYI Run the challenge To run the challenge you have to...

CVE-2026-22686

Enclave VM Sandbox Escape CTF Challenge Challenge: "Breaking the Walls" Difficulty: Hard Category: Source Code Review / Sandbox Escape Points: 500 Scenario You've discovered a mysterious sandboxed JavaScript execution environment...

BlueDoor

BlueDoor CTF Challenge Overview Challenge Name : BlueDoor CVE : CVE-2017-0144 EternalBlue Difficulty : 3/5 Category : Exploitation, Windows Authors : Seth Davis BlueDoor simulates a real-world vulnerability EternalBlue - CVE-2017-0144 in a Windows 7 system. The objective is to exploit the...

wargame-turkey_in_2

wargame 1. flag file divide 2. Brute force prevent - delay 50005s 3. logging 4. password hashing -wargame-turkeyin2...

CTF_CVE-2020-7471

DOBBYISFREE! CTF: 2020 Christmas CTF Category: WEB Keyword: DOBBYISFREE! Difficulty: ★★★☆☆ Background Since web hackers usually study SQL Injection on MySQL, I created this problem using PostgreSQL so that they can experience attacks on various databases. Solution Intended Solution Since the...

Pwn ARM NFC

Challenge ARM buffer overflow via NFC tag This project is an open-source and funny to make low-level challenge. Feel free to improve it or use it in your own projects. Each file is distributed "as is" in the hope that it will be useful, but without any warranty expressed or implied. File tree...

CTF-CVE-2022-0847

Dirty Pipe Deployment For this challenge, you want to overwrtie the "cat.txt" read-only file using CVE-2022-0847 exploit There are many way to do it using the exploit Dependencies Linux Kernel Version 5.8 or later vulnerable gcc GNU Compiler Collection for compiling the exploit code First-Time...

sploit

sploit Sploit is a Go package that aids in binary analysis and exploitation. The motivating factor behind the development of sploit is to be able to have a well designed API with functionality that rivals some of the more common Python exploit development frameworks while taking advantage of the ...

loader-CVE-2020-14343

loader-CVE-2020-14343 A web application vulnerable to CVE-2020-14343 insecure deserialization leading to command execution in PyYAML package. Writeup: https://github.com/TebbaaX/CTFs/blob/main/HackerNewsBdarija-CTF-2022/loadder/Loader.md...

traefik-CVE-2024-45410-poc

Shadow Corp CTF Challenge Welcome to the Shadow Corp Capture the Flag CTF challenge! This challenge will test your skills in identifying and exploiting vulnerabilities related to security headers and HTTP proxy behavior. Your mission is to bypass protections and uncover secrets hidden within the...

Owasp-top-10-k8s-2025

OWASP Kubernetes Top 10 2025, hands-on A capture-the-flag built on the OWASP Kubernetes Top 10 — 2025. You've been hired to red-team NimbusMart , a fictional e-commerce company whose cluster grew faster than its security. Ten challenges, one per OWASP risk plus a bonus — exploit each weakness,...

OverRide

OverRide Explore disassembly, binary exploitation & reverse-engineering through 10 little challenges. In the folder for each level you will find: flag - password for next level README.md - how to find password source.c - the reverse engineered binary dissasemblynotes.md - notes on asm See the...

CTF---CVE-2011-2523

Scenario Capture the Flag - CVE-2011-2523 Capture the decrypted /etc/shadow and /etc/passwd file from vulnerable Metasploitable 2 server. Setup Enviornment Step 1: Download an unzip virtual machine For this CTF, we run VMware Workstation Pro with two virtual machines. We utilize Kali Linux as the...

CTF-CVE-2019-9053-GTFOBins

CTF, CVE-2019-9053, GTFOBins I utilized the machines on https://tryhackme.com/ and my own Kali on WSL to do this exercise and it is part of the CTF challenge. The following information helped me solved the challenge: vim on https://gtfobins.github.io/gtfobins/vim/ and https://gtfobins.github.io/...

CrackMeZ3S-CTF-CrackMe-Tutorial

How to write a CrackMe for a CTF competition With the growing popularity of CTF capture the flag competitions, and the excellent performance of Polish teams like Dragon Sector in this area, I thought it would be interesting to demonstrate the construction of a simple CrackMe, using some creative...

vulnerability-in-Remix-React-Router-CVE-2025-31137-

overview after reading write up of @zhero in his personal blogpost i decide to build this CTF to learn how things work and after that i decide to share it with anybody who wants to learn how exploit this vulnerability , i try to make CTF with [email protected] version but when i check...

CVE-2020-9484

CVE-2020-9484 with interactive mode and args Designed specifically for CTF challenge CERTain Doom on TryHackMe Join Room https://tryhackme.com/r/room/certaindoom Remake of CVE-2020-9484 by Pentestical Shoutout to ChatGPT for the auto creation of interactive mode, and args :...

TryHack3M-Bricks-Heist

TryHack3M: Bricks Heist Exploit • Writeup • CTF Challenge A comprehensive repository containing a custom exploit and detailed writeup for the TryHack3M: Bricks Heist challenge Quick Start • Repository Structure • The Exploit • The Writeup • Disclaimer Overview This repository documents the...