- Published on
Hacking 4 webapps from Break The Syntax CTF 2025. The apps contain a number of different vulnerabilities: ldap injection, command injection, ssti, php type juggling and several privilege escalation techniques on Linux.
Type-juggling
All Posts (99)
- pwn (32)
- rev (15)
- web (12)
- crypto (10)
- forensic (8)
- osint (8)
- misc (6)
- bitsctf (6)
- bitsctf-2025 (6)
- flagyard (5)
- swampctf (5)
- swampctf-2025 (5)
- pwntools (4)
- malware (4)
- 1753ctf (3)
- 1753ctf-2025 (3)
- brunnerctf-2025 (3)
- brunnerctf (3)
- mobile (3)
- sqlinjection (3)
- downunderctf (3)
- downunderctf-2025 (3)
- stego (3)
- deadface (3)
- deadface-2025 (3)
- junior-crypt-2025 (3)
- junior-crypt (3)
- nullcon (3)
- nullcon-2025 (3)
- binary (3)
- ctflearncom (3)
- pwnme-2025 (2)
- pwnme (2)
- bcactf-60 (2)
- bcactf (2)
- xss (2)
- ssti (2)
- android (2)
- reverse (2)
- beginner (2)
- games (2)
- pingctf (2)
- lactf (2)
- lactf-2025 (2)
- dawgctf (2)
- dawgctf-2025 (2)
- srop (2)
- why2025-ctf (2)
- why2025 (2)
- greyctf-2025 (2)
- grey-cat-the-flag-2025 (2)
- hardware (2)
- nahamcon-ctf (2)
- nahamcon-ctf-2025 (2)
- no-hack-no-ctf-2025 (2)
- no-hack-no-ctf (2)
- pearl (2)
- utctf-2025 (2)
- utctf (2)
- sunshinectf (2)
- sunshinectf-2025 (2)
- advent-of-pwn (1)
- pwncollege (1)
- binex (1)
- dompurify (1)
- csp (1)
- unicode-overflow (1)
- btsctf (1)
- btsctf-2025 (1)
- ldap (1)
- ldap-injection (1)
- command-injection (1)
- type-juggling (1)
- magic-hash (1)
- linux-privesc (1)
- flutter (1)
- aes (1)
- jni (1)
- frida (1)
- buckeyectf-2025 (1)
- buckeyectf (1)
- 0xl4ugh (1)
- crate-ctf (1)
- crate-ctf-2025 (1)
- broncoctf (1)
- broncoctf-2025 (1)
- crypto-ctf (1)
- crypto-ctf-2025 (1)
- backdoorctf24 (1)
- torrent (1)
- pcap (1)
- nitectf (1)
- nitectf-2025 (1)
- godot (1)
- elfisyou (1)
- baba-is-you (1)
- bluehensctf (1)
- glacierctf (1)
- cve-2024-34064 (1)
- hackthevotectf (1)
- heroctf-v7 (1)
- heroctf (1)
- arduino (1)
- imaginaryctf (1)
- imaginaryctf-2025 (1)
- industrial-intrusion-ctf (1)
- password (1)
- keepass (1)
- ppc (1)
- blockchain (1)
- baby (1)
- justctf-2025 (1)
- justctf (1)
- k17-2025 (1)
- k17 (1)
- l3akctf-2025 (1)
- unity-engine (1)
- litctf (1)
- litctf-2025 (1)
- lucky (1)
- rop (1)
- muted-shell (1)
- seccomp (1)
- new-year-ctf-2026 (1)
- new-year-ctf (1)
- rsa (1)
- ret2libc (1)
- bcrypt (1)
- dns (1)
- dig (1)
- int-overflow (1)
- patriotctf-2025 (1)
- patriotctf (1)
- spookyctf (1)
- gpn-ctf-2025 (1)
- gpn-ctf (1)
- ping (1)
- tjctf (1)
- tjctf-2025 (1)
- ehax (1)
- ehax-2025 (1)
- sandbox (1)
- shellcode (1)
- payload (1)
- summary (1)
- summary-2025 (1)
- i95 (1)
- pegasus (1)
- css (1)
- chess (1)
- umdctf (1)
- umdctf-2025 (1)
- whyctf (1)
- whyctf-2025 (1)