SSRF

Posts tagged "SSRF"

2 posts found

7 min read

Codegate 2026 — ERP_system Writeup

A PHP stream filter that hashes whatever it reads turns into an oracle: chain an SSRF in hash.php through a public redirector to a localhost-only secret reader, then recover the flag one byte at a time from a 500-vs-200 side channel.

#CTF#Cybersecurity#Web

4 min read

GPN CTF 2026 — Secure Secretpickle Writeup

Pickle RCE is sandboxed and the client HTML is sanitized, so the flag comes from the admin bot instead: it visits any URL you hand it, including file:///flag.txt, and returns the screenshot.

#CTF#Cybersecurity#Web

Other Tags

Cybersecurity31CTF23Web12Network8API Security7Forensics7IDOR6Penetration Testing5Linux5OSCP4PEN-2004XSS4Reverse Engineering4Defense4Authorization4GoCat3Networking3Mobile Security3Access Control3Testing3