Brett Buerhaus (@bbuerhaus), Sam Curry (@samwcyo), Maik Robert (@xEHLE_) A few years ago, I discovered a Cross-Site Scripting (XSS) chain that incorporated several interesting methods that I usually see in write-ups or Capture the Flag challenges. I had to heavily redact this blog post to ensure the anonymity of the company because it is a [ ]
Test out this concept with a lab I helped develop at https://app.hackinghub.io/surl I was hacking on a bug bounty program recently and discovered that the website is signing every request, preventing you from modifying the URL, including GET parameter values. I wanted to discover how they were doing this and find a way around it. [ ]
Intro The musical artist known as BT recently launched his 14th album as an interactive NFT experience on the Arweave blockchain called Metaversal. Part of this experience was a multiple day long puzzle treasure hunt. Metaversal: https://btmusic.com/metaversal/ The beginning of the treasure hunt: https://twitter.com/BT/status/1443318319235444738 The whole experience involved a matic airdrop, three…
Solved by: ziot (@bbuerhaus) xEHLE (@xEHLE_) mattm (@mattmcquaig) LeFevre (@_LeFevre_) Cr0wn_Gh0ul launched a new puzzle with a 1 Eth and 800 Matic prize recently. This involved airdropping matic NFTs and contracts to many addresses, similar to the one million matic NFTs he airdropped recently. This puzzle involved navigating the contracts, finding the NFTs, extracting text [ ]
The infamous crypto puzzle artist coin_artist just launched a new NFT airdrop for hitting 50,000 followers on Twitter. As with all coin_artist related announcements and products, we immediately dusted off the magnifying glass and started to seek for a puzzle. We quickly saw that she tweeted #1347 which is her bat signal that there is [ ]
I recently participated with the CTF team Norse Code representing Hacking for Soju in the DEFCON 29 CTF qualifiers. There was a web challenge, so I went full speed ahead to solve it. Overall the challenge is fairly straightforward and not too difficult, but I decided to do a write-up on it to demonstrate one [ ]
Solvers: ziot - Brett Buerhaus JTobcat - Justin Tobin LeFevre - Ben LeFevre mattm - Matt McQuaig A few of us recently participated in another puzzle and managed to be victorious, collecting 34700 $coin (est $20,000 at time of solve) prize. coin_artist of Blockade Game and Bitcoin fame recently launched a new crypto currency called [ ]
HackerOne just ran the online h@cktivity con and with it was a CTF. I spent 15 hours solving the big web challenge with the team Hacking for Soju called Pizza Time! This is yet another solid web CTF challenge created by the wizard Adam Langley. This is the challenge text that leads you into it: [ ]