https://ctftime.org/event/2598/
| Name | Category | Solve | Keywords |
|---|---|---|---|
| book | Web | 21/509 | dom clobbering |
| Beautiful World | Web | 19/509 | bypass beautfulsoup sanitize XSS |
| BabyJail | Misc | 93/509 | pyjail |
| calc | Misc | 37/509 | pyjail PEP3131 |
| BabyJail - Revenge | Misc | 3/509 | pyjail frame switching |
| Name | Category | Solve | Keywords |
|---|---|---|---|
| 💉 SQLi Payload Generator | Web | 8/12 | nosql injection |
| 📒 Markdown Note | Web | 3/12 | XSS |
| 😈 Safe Eval | Misc | 1/12 | pyjail |
| Name | Category | Solve | Keywords |
|---|---|---|---|
| Preview Site 🔍 | Web | 56/64 | open redirect LFR |
| Breakjail ⛓️ | Misc | 20/64 | pyjail sanitizer |
| Breakjail Online 🛜 | Web | 13/64 | pyjail SSTI |
https://final.ctf.scist.org/challenges
| Name | Category | Solve | Keywords |
|---|---|---|---|
| formatter | Web | 15/32 | SSTI |
| parser | Web | 2/32 | XSS sanitizer |
| parser-revenge | Web | 0/32 | XSS sanitizer |
| pyjail1 | Misc | 23/32 | pyjail |
| pyjail2 | Misc | 16/32 | pyjail |
| Name | Category | Solve | Keywords |
|---|---|---|---|
| Can you describe Pyjail? | Misc | 2/321 | pyjail python descriptor |
| Name | Category | Solve | Keywords |
|---|---|---|---|
| Palitan ng pera | Web | 27/165 | observe webshell |
| Normal Website | Web | 15/165 | Werkzeug debug mode path traversal |
| [教學題] 極之番『漩渦』 | Web | 33/165 | php weak type php parameter array LFI2RCE iconv filter chain |
https://final.ctf.scist.org/challenges
| Name | Category | Difficulty | Keywords |
|---|---|---|---|
| fakelog | Web | Easy | LFI RCE |
| fakelog-sql | Web | Easy | sqli |
| CrossStyleSheets | Web | Easy/medium | CSSi |