ASIS CTF - Web 1 - Golem is stupid!

A web security challenge, where we have to exploit a functionality of jinja templates with in a python flask framework based web application

Tokyo Westerns CTF 2017 - Web 1 - Freshen Uploader

A web challenge, where we have a exploit a LFI and then a vulnerable type check in PHP against return value of a string function named 'stripos'

How we hacked our university notice board?

A post explaining how we hacked our notice board of our university by exploiting a SQL Injection vulnerability

Backdoor CTF 2014 - Misc 250-2 Writeup

A writeup for a steganography challenge that we solved in Backdoor CTF 2014

InCTF 2014 - Web 100 Writeup

A writeup on PHP string function vulnerabilities that we exploited as part of a web challenge in InCTF 2014

InCTF 2014 - Web 200 Writeup

A web security writeup for a challenge based on Blind SQL Injection that we solved in InCTF 2014

InCTF 2014 - Web 300 writeup

A web security writeup on SQL Truncation vulnerability that we used to solve a challenge in InCTF 2014