GraphQL alias batching to bypass a rate limit - HeroCTF v5
🚩 CTF - Write-ups
5 pages
HeroCTF v5 2023
Referer-based auth bypass via an Nginx/Express misconfig - HeroCTF v5
Cracking a weak JWT secret into Jinja2 SSTI RCE - HeroCTF v5
Author enumeration and a guessable referral secret - HeroCTF v5
Stored XSS, cache poisoning and password reset to admin takeover - HeroCTF v5
