Hi guys, i wanna introduce a way to earn $10k bounty on an open-source projects. a month ago, i reported a bug in the ML Framework. and the bug i found was not critical so i needed to find a way to...

Summary In summary, I found a Self-ReDoS vulnerability in the issue feature of github.com and reported it to HackerOne. Analysis function onPaste$1(event) { const { currentTarget: el } = eve...

(Web) Baby Simple Gocurl (Web) Adult Simple Gocurl These two challenges require reading flag in the /flag/ path via SSRF. (Web) Baby Simple Gocurl n.startsWith("https://") || n.startsWit...

spybug require("dotenv").config(); const fs = require("fs"); const path = require("path"); const express = require("express"); const session = require("express-session"); const { createAdmin } =...

Summary Cause I was lazy, I didn’t do ctf for a long time. If i say “cause I was busy”, it looks fucking stupid. When I’m solving, the time of ctf is only 5 hours, so i just decided to solve the w...