Teams
- black b1rds
| # | Flag | Box |
|---|---|---|
| 1 | Login Admin | Injection |
| 2 | DOM XSS | XSS |
| 3 | Privacy Policy | Miscellaneous |
| 4 | Login Jim | Injection |
| 5 | Multiple Likes | Broken Anti Automation |
| 6 | Bonus Payload | XSS |
| 7 | Login Bender | Injection |
| 8 | Password Strength | Broken Authentication |
| 9 | Bully Chatbot | Miscellaneous |
| 10 | Zero Stars | Improper Input Validation |
| 11 | Repetitive Registration | Improper Input Validation |
| 12 | Empty User Registration | Improper Input Validation |
#2 - Press F
"Press F to Pay Respect"
| # | Flag | Box |
|---|---|---|
| 1 | Multiple Likes | Broken Anti Automation |
| 2 | Bonus Payload | XSS |
| 3 | Login Bender | Injection |
| 4 | Forged Review | Broken Access Control |
| 5 | Password Strength | Broken Authentication |
| 6 | Bully Chatbot | Miscellaneous |
| 7 | Score Board | Miscellaneous |
| 8 | Repetitive Registration | Improper Input Validation |
| 9 | Zero Stars | Improper Input Validation |
| 10 | Empty User Registration | Improper Input Validation |
#3 - The real world
"4"
| # | Flag | Box |
|---|---|---|
| 1 | Bonus Payload | XSS |
| 2 | Privacy Policy | Miscellaneous |
| 3 | Multiple Likes | Broken Anti Automation |
| 4 | DOM XSS | XSS |
| 5 | Login Bender | Injection |
| 6 | Password Strength | Broken Authentication |
| 7 | Forged Review | Broken Access Control |
| 8 | Bully Chatbot | Miscellaneous |
| 9 | Zero Stars | Improper Input Validation |
| 10 | Repetitive Registration | Improper Input Validation |
| 11 | Score Board | Miscellaneous |
#4 - AAO
| # | Flag | Box |
|---|---|---|
| 1 | Login Jim | Injection |
| 2 | Login Bender | Injection |
| 3 | Password Strength | Broken Authentication |
| 4 | Bonus Payload | XSS |
| 5 | Privacy Policy | Miscellaneous |
| 6 | Multiple Likes | Broken Anti Automation |
| 7 | DOM XSS | XSS |
| 8 | Error Handling | Security Misconfiguration |
#5 - Potato
| # | Flag | Box |
|---|---|---|
| 1 | Bonus Payload | XSS |
| 2 | Multiple Likes | Broken Anti Automation |
| 3 | Login Admin | Injection |
| 4 | DOM XSS | XSS |
| 5 | Privacy Policy | Miscellaneous |
| 6 | Login Jim | Injection |
| 7 | Login Bender | Injection |
#6 - GH0ST Team
"Winners"
| # | Flag | Box |
|---|---|---|
| 1 | Multiple Likes | Broken Anti Automation |
| 2 | Bonus Payload | XSS |
| 3 | Login Bender | Injection |
#7 - YG25
"YG"
| # | Flag | Box |
|---|---|---|
| 1 | DOM XSS | XSS |
| 2 | Multiple Likes | Broken Anti Automation |
| 3 | Login Admin | Injection |
| 4 | Repetitive Registration | Improper Input Validation |
| 5 | Zero Stars | Improper Input Validation |
#8 - Hadi
"Hadi"
| # | Flag | Box |
|---|---|---|
| 1 | Login Bender | Injection |
| 2 | Password Strength | Broken Authentication |
| 3 | Forged Review | Broken Access Control |
| 4 | Bully Chatbot | Miscellaneous |
| 5 | Score Board | Miscellaneous |
| 6 | Zero Stars | Improper Input Validation |
| 7 | Repetitive Registration | Improper Input Validation |
#9 - SalimTeam
"1"
| # | Flag | Box |
|---|---|---|
| 1 | Bully Chatbot | Miscellaneous |
| 2 | DOM XSS | XSS |
| 3 | Login Admin | Injection |
| 4 | Login Jim | Injection |
| 5 | Empty User Registration | Improper Input Validation |
#10 - PwnErEZ
"Mikah"
| # | Flag | Box |
|---|---|---|
| 1 | Forged Review | Broken Access Control |
| 2 | View Basket | Broken Access Control |
