Dreamhack, Leak all write ups via IDOR
Summary The dreamhack is a security education program managed by Theori. In dreamhack, Users can solve wargame challenges and write solutions. At this time, the user can write the solution for ...
Web2.0
0-Day, Cross-Site Scripting via markdown syntax (Vditor)
Summary The vanessa219/vditor is a markdown editor supported by browsers. There were two vulnerabilities. First vulnerability, When a user creates a link using the markdown syntax, the server...
Line CTF 2022 Write Up
Summary Summary (Web) gotm (Web) online-library I participated a Line CTF 2022 this saturday and I only solved the one challenge in this ctf. So I am very not good. Just get a stress. So...
Spring GoN Open Qual CTF 2022 Write Up
Summary This time I did participate in CTF because GoN team of Kaist hosted the CTF. I was hacking to dawn after long time and I solved two challenges:ColorfulMemo, NSS. Summary (Q)...
Total.js CMS, Cross-Site Scripting
Summary The total.js Platform offers you an excellent and stable server-side Node.js framework, client-side library for creating famous web applications with more than 250 UI components for free. ...