challenge 42
- WordPress About Author <= 1.3.9 Authenticated Stored XSS
- [NeverLAN 2019] - Das Blog
- [NeverLAN 2019] - Things are not always what they seem
- [NeverLAN 2019] - SQL FUN 2
- [NeverLAN 2019] - SQL FUN 1
- [NeverLAN 2019] - Dirty Validate
- [NeverLAN 2019] - Console
- [NeverLAN 2019] - Cookie Monster
- [OtterCTF 2018] - Birdman's Data Writeup
- [OtterCTF 2018] - Otter Leak Writeup
- [OtterCTF 2018] - ReCurse Writeup
- AttackDefense.com [RCE] - CVE-2018-9037 Exploit
- AttackDefense.com [MSF] - Meterpreter Basics
- AttackDefense.com [RCE] - WeBid
- AttackDefense.com [LFI] - CVE-2018-12613 Exploit
- AttackDefense.com [RCE] - CVE-2018-7448 Exploit
- AttackDefense.com [LFI] - CVE-2018-7422 Exploit
- AttackDefense.com [RCE] - CVE-2018-7466 Exploit
- AttackDefense.com [RCE] - CVE-2018-10517 Exploit
- AttackDefense.com [SXSS] - Concrete5 CMS
- AttackDefense.com [SXSS] - YetiForce CRM
- AttackDefense.com [PE] - Exploiting Setuid Programs II
- AttackDefense.com [PE] - Editing Gone Wrong
- AttackDefense.com [PE] - Permissions Matter!
- AttackDefense.com [RCE] - RPi Cam Control
- AttackDefense.com [RCE] - PHP Utility Belt
- AttackDefense.com [SXSS] - MyBB Downloads Plugin
- AttackDefense.com [SXSS] - ApPHP MicroBlog
- AttackDefense.com [SXSS] - Easy Appointments
- AttackDefense.com [ID] - CVE-2018-12604 Exploit
- AttackDefense.com [RCE] - osCommerce
- AttackDefense.com [RCE] - ApPHP MicroBlog
- AttackDefense.com [RCE] - Joomla com_xcloner Component
- [DCTF Quals 2018] Even more lucky?
- [DCTF Quals 2018] Lucky
- [DCTF Quals 2018] Message
- [DCTF Quals 2018] Broken TV
- [DCTF 2017] Working Junks Writeup
- [DCTF 2017] Security CCTV Writeup
- [DCTF 2017] State Agency Writeup
- [DCTF 2017] hack-tac-toe Writeup
- [DCTF 2017] Fedora Shop Writeup