In this blog post, we discuss two vulnerabilities that were identified during my research on HTTP Request Smuggling:
- Node.js - CVE-2023-30589
- Gunicorn - CVE-2024-1135
Category: Web Exploitation
This year I contributed 2 challenges to bi0s CTF (formerly InCTF Internationals).
In this post, we discuss the intended solution to PyCGI challenge. The source code of this challenge can be downloaded from here.
#
Analysis
We are provided with 2 attachments for this challenge:
- Dockerfile
- Nginx.conf
Looking into the Nginx configuration, we can find that there is a potential path traversal in the /static endpoint. You can read more about this here.
In this post, we discuss the solution to EmoLocker challenge from bi0s CTF 2022. The source code of this challenge can be downloaded from here.
#
Analysis
Upon opening the challenge link, we are presented with a lockscreen that uses emojis instead of numbers. The page has two features: register and login. Additionally, there is an admin bot, which suggests that the challenge may involve client-side concepts.
#
About Exercism
Exercism is an online platform that helps people upskill their programming skills through practice and mentoring. They are an open-source organization with over 200 GitHub repositories, thousands of contributors, and a friendly, inclusive community.
I came to know about the platform in 2018 when my mentor - Vipin Pavithran asked me to improve my coding skills by practicing on Exercism.
Exercism is an amazing platform to learn to code. It has got an amazing set of challenges and a huge variety of learning tracks.
tl;dr
- XSS using DOM Clobbering
<a id="showInfos"></a><a id="SETTINGS" name=check data-timezone="aaa" data-location="eval(window.name)"><a id="SETTINGS" name="x">- Bypass CSRF protection to execute XSS and read flag.