During my reconnaissance of military websites as part of the Department of Defense’s vulnerability disclosure, I noticed two particular websites were using Jira, a popular issue tracking web application. I initially wrote these websites off as there wasn’t any exploits that I was aware of at the time. Later, I…

Introduction to the challenge and capture the flags Capture the flag events are particular fun events done to challenge people and get people to really think about the puzzle they’re presented with. They can be in many different types and variations from cryptography style puzzles to a vulnerable web application, but they all have one thing in common…