All my self-written ctf web tasks for our board duckerz.ru
(without writeups, only sourses)
All sensitive data like flags, tokens, secret-keys and creditionals are altered.
-
Pin_code (bruteforce by requests)
-
Bold_login (JWT)
-
Сoupon_giveaway (sqli)
-
Nft_marketplace (sqli)
-
Fatal_error (js)
-
Cookie_club (cookies)
-
Polygon (requests)