/CTF-2021

CTF for HDE 64 students at See Security College. Exploit a JWT (web part) & CVE-2021-3156 (LPE part).

Primary LanguageCSS

CTF-2021

Notes

This CTF is not using DB for authentication. In addition to that, this CTF generates static tokens because of the following:

  1. Minimize the chances of a user solving this CTF in a different way

  2. Minimize the chances of a user missing hints by modifying or bypassing web pages/tokens.

  3. Less traffic

  4. More reliability for users solving this CTF.

ubuntu 20.04 is recommended for the LPE part. If you clone this, please delete this README.md file because it contains some hints.