h1-ctf: Writeup Hackyholiday CTF

Hi there, Find my writeup on attached : F1128138 Thanks adam for making the CTF, Really PAIN for my head! Impact Hackerone Hoodie ? 😍😍...

ctf2

This repository is a writeup of the CSAW CTF 2015, a capture the flag CTF competition. The writeup is written in Polish, with an English version available for those who prefer it. The writeup covers various challenges from the competition, including web, exploit, crypto, reversing, and forensics...

Exploit for OS Command Injection in Secudos Domos

CVE-2020-14293 This vulnerablity was discovered and disclosed...

h1-ctf: [h1-2006 2020] Writeup h12006 CTF

^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ Impact...

h1-ctf: [H1-2006 2020] CTF Writeup

F851692 ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ I'll try to have the writeup ready in the following days here: https://hipotermia.pw/bb/h1-2006-ctf-solution It will be password protected and I will post a comment here when it is ready. Thanks for this CTF, I really enjoyed it! Impact -...

h1-ctf: [H1-2006 2020] [Multiple Vulnerability] CTF Writeup - @abdilahrf_

As there is a private invite for the first 10 solver, i send only the flag now F851115 will complete my writeup on the next comment. Impact Controlling martenmickos account...

h1-ctf: [H1-2006 2020] CTF Writeup

Hi, The flag is :^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$ F850811 I will do the writeup in the report summary. Regards, Yash Impact None as the money paid was not real...

h1-ctf: [H1-2006 2020] CTF Writeup

Just submitting Flag for now, Will soon submit Writeup : Impact Flag: ^FLAG^736c635d8842751b8aafa556154eb9f3$FLAG$...

h1-ctf: [H1-2006 2020] Got the flag

Hey got the flag, will update the writeup soon started 6:00am may 30 BountyPay CTF Challenge Completed! Congratulations, all of the hackers have been paid their Bug Bounty money and you have completed the challange! Please submit your write up to https://hackerone.com/h1-ctf and make sure to...

h1-ctf: [H1-2006 2020] H1-2006 CTF Writeup

Hi! The challenges were really great. I had a lot of fun and I can honestly say I learned a few tricks during this journey. I will be submitting the flag now and will work on a very good writeup until the deadline. My reasoning is that there are two different prizes, one for the first ten and...

Wing FTP Server 6.2.5 Privilege Escalation

Exploit Title: Wing FTP Server 6.2.5 - Privilege Escalation Google Dork: intitle:"Wing FTP Server - Web" Date: 2020-03-03 Exploit Author: Cary Hooper Vendor Homepage: https://www.wftpserver.com Software Link: https://www.wftpserver.com/download/wftpserver-linux-64bit.tar.gz Version: v6.2.5 and...

h1-ctf: [h1-415 2020] H1-415 CTF Writeup by W--

H1-415 CTF Writeup Intro HackerOne kicked off this year's H1-415 CTF with the following tweet: F692033 Loading the target challenge website shows that the website is called My Docz Converter. A quick look at the challenge website shows that it allows users to register an account and then upload a...

h1-ctf: [H1-415 2020] CTF Writeup

As there is a bonus for the first solver, I am sending only the flag for now. F687111 Impact...

50m-ctf: CTF Writeup - c8889970d9fb722066f31e804e351993

CTF Code: c8889970d9fb722066f31e804e351993 HackerOne $50M CTF Write-Up ============ I came across this tweet announcing the HackerOne CTF for invitations to the HackerOne event in Vegas during DEFCON. I tried searching for a URL for the CTF, but couldn't find anything online, so I assumed that th...

Should You Send Your Pen Test Report to the MSRC?

Every day, the Microsoft Security Response Center MSRC receives vulnerability reports from security researchers, technology/industry partners, and customers. We want those reports, because they help us make our products and services more secure. High-quality reports that include proof of concept,...

Should You Send Your Pen Test Report to the MSRC?

Every day, the Microsoft Security Response Center MSRC receives vulnerability reports from security researchers, technology/industry partners, and customers. We want those reports, because they help us make our products and services more secure. High-quality reports that include proof of concept,...

h1-5411-CTF: CTF Writeup flag{cha1n1ng_bugs_f0r_fun_4nd_pr0f1t?_or_rep0rt_an_LF1}

We have attached the writeup, the CTF was solved by me and Chapuka. We would like to publish our writeup for the CTF in our blog, when can we do that? It was a great CTF, it's a shame we are not @Buenos Aires right now :/ Impact...

h1-5411-CTF: flag{cha1n1ng_bugs_f0r_fun_4nd_pr0f1t?_or_rep0rt_an_LF1}

Got the flag: flagcha1n1ngbugsf0rfun4ndpr0f1t?orrep0rtanLF1 Will submit the writeup as soon as I finalize it. Impact -...

Exploit for Incorrect Permission Assignment for Critical Resource in Malwarefox Antimalware

Exploits Public exploits I've authored...

Firejail - Privilege Escalation Exploit

Exploit for linux platform in category local exploits firejail advisory for TOCTOU in --get and --put local root Releasing a brief advisory/writeup about a local root privesc found in firejail that we reported back in Nov, 2016. This is in response to a recent thread on oss-sec where people seem...