This is similar to Irish-Name-Repo 1, but with a filter active. Through trials and errors we can deduce that the filter actively blocks common SQL injection terms like UNION or OR.
To bypass this we can just apply the payload admin'-- into the username form. Not only will it skip the password verification but also avoid using those filtered terms.
A popular platform for CTFs training (now CyLab Security Academy). These writeups are sorted by categories. Check out my profile here.
Writeups for web exploitation problems
Simple introduction to SQL Injections
We use Burp Suite to intercept the GET request, change the isAdmin cookie to True and we’ll get our flag:
Simple introduction to using Burp Suite to intercept requests
Simple source checking
Simple client-side (obfusticated) JS script sniffing
Simple client-side JS script sniffing
Simple cookie manipulation, with a touch of syntax
Simple cookies manipulation
Simple header manipulation
Pretty frustrating but interesting source checking challenge
Jumping through a trillion folder jumps
Sending an HTTP HEAD request
I struggled quite a bit at first, but notice that they forbid absolute file path. Meaning we can just use the relative file path to travel up the directories and get our flag.
Simply input ../../../../flag.txt into the form box to get the flag. Quite nice.
robots.txt with a twist
Introduces robots.txt
Simple implementation of Caesar cipher
Similar to basic-mod1 with a tweak
Very basic and straightforward problem, introduction to simple modular arithmetic
Writeups for cryptography problems