Tokyo Westerns CTF 2017 - Web 1 - Freshen Uploader

A web challenge, where we have a exploit a LFI and then a vulnerable type check in PHP against return value of a string function named 'stripos'

InCTF 2014 - Web 100 Writeup

A writeup on PHP string function vulnerabilities that we exploited as part of a web challenge in InCTF 2014