Simple introduction to SQL Injections

Simple introduction to using Burp Suite to intercept requests

Simple source checking

Simple client-side (obfusticated) JS script sniffing

Simple client-side JS script sniffing

Simple cookie manipulation, with a touch of syntax

Simple cookies manipulation

Simple header manipulation

Pretty frustrating but interesting source checking challenge

Jumping through a trillion folder jumps

Sending an HTTP HEAD request

I struggled quite a bit at first, but notice that they forbid absolute file path. Meaning we can just use the relative file path to travel up the directories and get our flag.

Simply input ../../../../flag.txt into the form box to get the flag. Quite nice.

robots.txt with a twist

Introduces robots.txt