Published on29 juillet 2023BYUCTF 2023 – urmombotnetdotnet - 4BYUCTF-2023LumyWebStacktracesGetting secrets through stacktraces with flask
Published on29 juillet 2023BYUCTF 2023 – urmombotnetdotnet - 5BYUCTF-2023LumyWebStacktracesGetting secrets through stacktraces with flask
Published on29 juillet 2023ImaginaryCTF 2023 – WebImaginaryCTF-2023LumyForensicsBrowserDataBrowser data exploit
Published on29 juillet 2023n00bzCTF 2023 – Crack & Crackn00bzCTF-2023LumyForensicsZipPDFBruteforce cracking of zip and pdf file
Published on29 juillet 2023n00bzCTF 2023 – Google Form 2n00bzCTF-2023LumyMiscGoogle-formGoogle form misconfiguration permitting to see previous responses
Published on29 juillet 2023n00bzCTF 2023 – Pyjail 1n00bzCTF-2023LumyJailPython jail with a huge blacklist. If we can't bypass the blacklist, let's delete the blacklist using pop
Published on29 juillet 2023TFCCTF 2023 – ListTFCCTF-2023LumyForensicsPCAPPCAP capture with RCE on the system through webshell
Published on29 juillet 2023TFCCTF 2023 – MCTEENXTFCCTF-2023LumyForensicsZipAn encrypted zip file, with partial knowledge of a file content
Published on29 juillet 2023TFCCTF 2023 – My first calculatorTFCCTF-2023LumyMiscJailPython jail with blacklist containg all letters + "." Unicode and octal is key
Published on29 juillet 2023TFCCTF 2023 – My third calculatorTFCCTF-2023LumyMiscJailPython jail with blacklist containg all letters + "." + cmd restrictions. Unicode and octal is key
Published on29 juillet 2023TFCCTF 2023 – PassTFCCTF-2023LumyReverseChar by Char password comparison. Bruteforce and reverse solutions
Published on29 juillet 2023TFCCTF 2023 – Some TrafficTFCCTF-2023LumyForensicsSteganographyPCAPExfiltration of sensible data using steganography upon network
Published on29 juillet 2023TJCTF 2023 – Back to the pastTJCTF-2023LumyWebJWTChanging algorithm from RS256 to HS256, bypassing signature process