Tag: php

2019
0
writeups

HackLab ESGI Security Day 7th Edition - Write-ups

🔗Information 🔗CTF Name : ESGI Security Day 7th Edition Website : ctf.hacklab-esgi.org Type : Online/On-site Format : Jeopardy 🔗100 - Rookie - Web (▀̿Ĺ̯▀̿ ̿) M0th3r >Hey bah quoi ? Tu t’attend

0
writeups

ENCRYPT CTF 2019 - Salty Write-ups

🔗Information 🔗CTF Name : ENCRYPT CTF 2019 Website : ctf.encryptcvs.cf Type : Online Format : Jeopardy CTF Time : link This write-up is not like the others, this one is more salty. Warning for sens

0
writeups

CONFidence CTF 2019 Teaser - Write-up

🔗Information 🔗CTF Name : CONFidence CTF 2019 Teaser Website : confidence2019.p4.team Type : Online Format : Jeopardy CTF Time : link 🔗My admin panel - Web I think I've found something interestin

0
writeups

Pragyan CTF 2019 - Write-ups

🔗Information 🔗CTF Name : Pragyan CTF 2019 Website : ctf.pragyan.org Type : Online Format : Jeopardy CTF Time : link 🔗125 - Mandatory PHP - Web PHP, PHP everywhere get the flag and earn your poin

2018
0
writeups

Hack.lu CTF 2018 - Full step by step Write-up

🔗Information 🔗CTF Name : Hack.lu CTF 2018 Website : arcade.fluxfingers.net Type : Online Format : Jeopardy CTF Time : link 🔗Baby PHP - Web PHP is a popular general-purpose scripting language tha

0
writeups

picoCTF 2018 - Write-up

🔗Information 🔗CTF Name : picoCTF 2018 Website : picoctf.com Type : Online Format : Jeopardy CTF Time : link 🔗400 - fancy-alive-monitoring - Web One of my school mate developed an alive monitorin

0
writeups

Meepwn CTF Quals 2018 - Write-up

🔗Information 🔗Version By Version Comment noraj 1.0 Creation 🔗CTF Name : Meepwn CTF Quals 2018 Website : ctf.meepwn.team Type : Online Format : Jeopardy CTF Time : link 🔗OmegaSector - W

2016
0
security

Common upload flaws

If a remote web server let you upload and execute scripts so this is beginning to turn turn bad. Here are some common upload flaws: extensions blacklist double extensions MIME type Null Byte 🔗Exten

0
security

c99.php : A backdoored backdoor

C99 is a PHP webshell. Attackers uploads it on web server in order to get information and above all execute commands with web user privileges (ex: www-data). This webshell is protected by a customizab