ctf.nitaimaarek.com Tracks Leaderboard Log in Sign up

Tracks / Server-Side Web Attacks

Server-Side Web Attacks

How web apps are attacked: access control, injection, client-side trust, and information disclosure. Theory, then labs where you read a real HTTP exchange and pull the secret out.

Learn

1. How web apps actually break 7 min read
2. Reading an HTTP exchange like an attacker 5 min read

Labs

Ask the Robots

analysis

Easy 10 pts

The app tells you where the treasure is.

Open

Trust Me, I'm a Cookie

analysis

Easy 20 pts

Base64 is not a lock.

Open

Off By One Thousand

analysis

Medium 25 pts

The server forgot to check whose account it is.

Open

Stack Trace Souvenir

analysis

Medium 30 pts

Debug mode left on in production.

Open

Union of Concern

live target

Hard 40 pts

LIVE — a real database behind a search box.

Open