PicoCTF Secret Box Writeup
A writeup of the PicoCTF Secret Box challenge using an INSERT SQL injection to reveal admin secrets.
Koussay Dhifi
PicoCTF No FA Writeup
A writeup of the PicoCTF No FA challenge with a 2FA session bypass using a leaked database and Flask session cookie.
PicoCTF Hashgate Writeup
A writeup of the PicoCTF Hashgate challenge, showing how to exploit an MD5-based profile lookup.
PicoCTF Fool the Lockout Writeup
A writeup of the PicoCTF Fool the Lockout challenge showing a flawed IP-rate-limit bypass.
PicoCTF Credential Stuffing Writeup
A writeup of the PicoCTF Credential Stuffing challenge using raw TCP and threaded automation.
Where Are the Robots PicoCTF Challenge Writeup
A detailed writeup of the PicoCTF "where are the robots" web exploitation challenge.
logon Writeup PicoCTF
A writeup for the picoCTF easy web challenge named logon.
Reflected XSS with Event Handlers and href Attributes Blocked
A PortSwigger XSS lab writeup about reflected XSS with event handlers and href attributes blocked.
Insp3ct0r Writeup PicoCTF
A writeup for the PicoCTF easy web challenge named Insp3ct0r.