Nahamcon

TLDR; SSTI without spacebars with a Unicode normalization bypass Get ready for the 2022 DeafCon? Sounds interesting! Cool, so what have we got here? Username and email inputs are sent in a POST request to a PDF generator which generates our lovely ticket:

I’m a glutton for punishment. I’m not the best at these CTFs yet, but, boy o’ boy, do I love ‘em!

Writeup for Jurassic Park CTF Challenge First Check for Any Information available in Robots.txt

The CTF was in March between 12th and 14th 2021. This repository is included WARMUP, THE MISSION, RECON and MISC questions and answers. WARMUP Stay Away Creepy Crawlers Please follow the rules for this CTF! https://ctf.nahamcon.com/rules Check out the source code and the flag is in comment line flag{90bc54705794a62015369fd8e86e557b} Sholeas Do you double-knot your shoelaces? You…

This was a Hard challenge with only 19 solves. Created by JohnHammond#6971 Walkthrough Going to the “Workerbee” link we get a jinja2 traceback. Showing us we’re dealing with a Python 3.8 Flask application

Hello, I m Mr_echo, I m played Nahamcon CTF 2021 this weekend, and I'm gonna write some interesting challenges that I solved 👌.~Enjoy 1. Homeward Bound [WEB 50 p] Objective: -bypass 404 http://challenge.nahamcon.com:30903 NOTE: That message is intended. This challenge is working as it should. So I tried to bypass this page by adding headers I found…

although this event i can only finished 1 one challenge but i learnt a lot from others writeup. It’s make me feel that I only have the width not the depth in exploiting. Now I need to reflect meself about what i’ve been doing right now. That’s some random shit…

Hi guys, in this write-up, we are going to find an information disclosure on http://jh2i.com:50003. This is an easy ctf challenge. Let’s define the flag as an information disclosure. I will try to show you some web tools that might help you.

NAHAMCON CTF 2020 Hi I’m B0rn2r00t, I have participated in NahamCon CTF 2020 and have acquired 370th place at the end of CTF. This post is all about how I solved some of the CTF’s challenges the Noob style😜. Noob style? Yeah this solving methods might be the unintended way. …