patali9

53rd place

3900 points


Awards


Solves

Challenge Category Value Time
Backdoor2 Miscellaneous 100
Backdoor1 Miscellaneous 100
JSON to XXE (Blind) Web Application 100
QR Code Miscellaneous 100
Insecure Direct Object Reference Web Application 100
Review comment and Metadata Web Application 100
S3 bucket misconfiguration Web Application 100
Default Credentials Web Application 100
RFI Web Application 100
XXE Web Application 100
SSRF Web Application 100
REST API HTTP Methods Web Application 100
Guessable Session ID Web Application 100
JWT Misconfiguration Web Application 100
User Password Enumeration Web Application 100
Client Side Validation Bypass Web Application 100
Server Fingerprint Web Application 100
Encoding - Hashing Web Application 100
Login bypass Web Application 100
Bruteforce Web Application 100
2FA - OTP Brute-Force 2 Authentication 100
2FA - OTP Leakage Authentication 100
SSAID/ANDROID_ID Device ID 100
SHA1 Hashing 100
MD5 Hashing 100
MD4 Hashing 100
Hardcoded Secret Binary Protection 100
RPATH Binary Protection 100
Caesar Cipher Encryption 100
File System Expose Content Providers 100
SQL Injection Content Providers 100
WTF Logs Logs 100
Verbose Logs Logs 100
Debug Logs Logs 100
Warnings Logs Logs 100
Error Logs Logs 100
Informational Logs Logs 100
HTTPS Traffic HTTP Traffic 100
HTTP Traffic HTTP Traffic 100
Sanity Check Flag Sanity Check 0