Express notes - "OFFZONE" express file upload challenge
The next challenge we did with Varik Matevosyan on OFFZONE Moscow CTF was an express.js file upload application - Express Notes.
The next challenge we did with Varik Matevosyan on OFFZONE Moscow CTF was an express.js file upload application - Express Notes.
OFFZONE Moscow team made a great challenge on prototype pollution and we with my friend Varik Matevosyan had a fun time finding gadgets for it.
On the 1 CAT COMPANY CTF we didn’t manage to finalize our solution for the BabyPython challenge, created by Vahe Karapetyan, but one of our team members - Varik Matevosyan, solved it anyways after the time was up.
On November 27 Cyhub Armenia organized a very fun local CTF event - 1 CAT COMPANY CTF and Hayk Andriasyan created an XXE challenge for it.
Intigiriti’s November challenge by IvarsVids was about a Vue.js one-pager that reflected user input with some replacements. After visiting the challenge homepage at https://challenge-1121.intigriti.io/ we quickly notice it reflects s
query parameter not escaping HTML less than and greater than signs resulting in HTML injection.
This month’s challenge, made by Holme, was a little bit different than the ones I have previously solved as it had a server-side processing issue.