Web
- Web 1
The flag was sitting in the 403 error page, and again in a custom Server response header.
- Stonk
A stock trading server backed up your portfolio under load, but restored it after a posted trade had already deducted stock, so the trade came through for free.
- Improper Validation of Specified Quantity in Sourcecodester CHMS
A vulnerability was found in SourceCodester Card Holder Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the component …
- Improper Access Control in SourceCodester IMS (Password Handler)
The Password Handler (edit_update.php) in SourceCodester Inventory Management System 1.0 trusts a client-supplied user_id, allowing a user to modify an account other than their …
- SQL Injection in SourceCodester IMS (edit_sell.php)
The up_pid parameter in edit_sell.php of SourceCodester Inventory Management System 1.0 is concatenated into a SQL query unsanitized, allowing remote, unauthenticated SQL …
- SQL Injection in SourceCodester IMS (sell_return.php)
The pid parameter in sell_return.php of SourceCodester Inventory Management System 1.0 is used in a SQL query unsanitized, allowing remote, unauthenticated SQL injection.
- Word Game
A pattern-matching word game with two SQL injection points, neither of which I got past a wall of 500 errors. Unsolved.
- BCAGPT
A chatbot front end whose prompt field fed straight into a SQL query.
- Flag+
The paywall trusted the Referer header, so swapping free.html for paid.html handed over the flag.
- Not Today
The endpoint released the flag only for a request stamped with one specific date, so I set it by hand.