Aurel 
3470
Place
2865
Points
143
Challenges
0
Compromissions
18%
App - Script
90 Points6 / 33
3%
App - Système
30 Points3 / 93
10%
Cracking
65 Points7 / 70
31%
Cryptanalyse
315 Points23 / 75
52%
Forensic
615 Points23 / 44
10%
Programmation
80 Points3 / 29
3%
Réaliste
30 Points2 / 60
50%
Réseau
315 Points17 / 34
26%
Stéganographie
70 Points6 / 23
- x EXIF - Metadata
- o Point à la ligne
- o Steganomobile
- o Twitter Secret Messages
- o TXT - George et Alfred
- o WAV - Analyse de bruit
- x Poem from Space
- x Points jaunes
- x EXIF - Miniature
- x Mimic - Dummy sight
- o WAV - Analyse spectrale
- x APNG - Just A PNG
- x Crypt-art
- x ELF x64 - Duality
- x PDF - Embedded
- x Genius ID
- x Kitty spy
- x PNG - Least Significant Bit
- x PNG - Pixel Indicator Technique
- x PNG - Pixel Value Differencing
- x Angecryption
- x Base Jumper
- x Hide and seek
33%
Web - Client
335 Points14 / 42
- o HTML - boutons désactivés
- o Javascript - Authentification
- o Javascript - Source
- o Javascript - Authentification 2
- o Javascript - Obfuscation 1
- o Javascript - Obfuscation 2
- o Javascript - Native code
- x Javascript - Webpack
- o Javascript - Obfuscation 3
- o XSS - Stockée 1
- x AST - Deobfuscation
- x CSP Bypass - Inline code
- x CSP Bypass - Nonce 2
- o CSRF - 0 protection
- x Web Socket - 0 protection
- x XSS DOM Based - Introduction
- o Flash - Authentification
- x XSS DOM Based - AngularJS
- x XSS DOM Based - Eval
- x CSP Bypass - Dangling markup
- x CSP Bypass - JSONP
- o CSRF - contournement de jeton
- o XSS - Volatile
- x CSP Bypass - Dangling markup 2
- x CSP Bypass - Nonce
- x CSS - Exfiltration
- x Javascript - Obfuscation 4
- x Relative Path Overwrite
- o XSS - Stockée 2
- x XSS DOM Based - Filters Bypass
- x Self XSS - DOM Secrets
- x CSPT - The Ruler
- x DOM Clobbering
- x Javascript - Obfuscation 6
- x Self XSS - Race Condition
- x Browser - bfcache / disk cache
- x HTTP Response Splitting
- x Javascript - Obfuscation 5
- x XS Leaks
- x XSS - Stored - contournement de filtres
- x XSS - DOM Based
- x Same Origin Method Execution
41%
Web - Serveur
920 Points39 / 96
- o HTML - Code source
- x HTTP - Contournement de filtrage IP
- o HTTP - Open redirect
- o HTTP - User-agent
- o Mot de passe faible
- o PHP - Injection de commande
- x API - Broken Access
- o Fichier de sauvegarde
- o HTTP - Directory indexing
- o HTTP - Headers
- o HTTP - POST
- o HTTP - Redirection invalide
- o HTTP - Verb tampering
- o Install files
- x Nginx - Alias Misconfiguration
- x Nginx - Root Location Misconfiguration
- x API - Mass Assignment
- o CRLF
- o File upload - Double extensions
- o File upload - Type MIME
- x Flask - Unsecure session
- x GraphQL - Introspection
- o HTTP - Cookies
- x Insecure Code Management
- o JWT - Introduction
- x XSS - Server Side
- o Directory traversal
- o File upload - Null byte
- x JWT - Jeton révoqué
- x JWT - Secret faible
- x JWT - Unsecure File Signature
- o PHP - assert()
- x PHP - Configuration Apache
- o PHP - Filters
- o PHP - Register globals
- x PHP - Remote Xdebug
- x Python - Server-side Template Injection Introduction
- o File upload - ZIP
- x Flask - Development server
- x GraphQL - Injection
- x Injection de commande - Contournement de filtre
- o Java - Server-side Template Injection
- x JWT - Clé publique
- x JWT - Header Injection
- o Local File Inclusion
- o Local File Inclusion - Double encoding
- x Nginx - SSRF Misconfiguration
- x Node - Eval
- o PHP - Loose Comparison
- o PHP - preg_replace()
- o PHP - Type juggling
- o Remote File Inclusion
- o SQL injection - Authentification
- x SQL injection - Authentification - GBK
- o SQL injection - String
- o XSLT - Exécution de code
- x Elixir - EEx
- x JWT - Unsecure Key Handling
- x LDAP injection - Authentification
- x Node - Serialize
- x NoSQL injection - Authentification
- o PHP - Path Truncation
- o PHP - Sérialisation
- o SQL injection - Numérique
- o SQL Injection - Routed
- x SQL Truncation
- o XML External Entity
- x XPath injection - Authentification
- x Yaml - Deserialization
- x API - Broken Access 2
- x GraphQL - Backend injection
- x GraphQL - Mutation
- x Java - Spring Boot
- o Local File Inclusion - Wrappers
- x PHP - Eval
- x PHP - Eval - Contournement de filtres avancés
- x SQL injection - Error
- x SQL injection - Insert
- x SQL injection - Lecture de fichiers
- x XPath injection - String
- x File upload - Polyglot
- x NodeJS - Prototype Pollution Bypass
- x NoSQL injection - En aveugle
- x SQL injection - Time based
- x Java - Custom gadget deserialisation
- x NodeJS - vm escape
- x Server Side Request Forgery
- x SQL injection - En aveugle
- x LDAP injection - En aveugle
- x PHP - Unserialize overflow
- x PHP - Unserialize Pop Chain
- x SQL Injection - Second Order
- x Python dotenv
- x Python - SSTI contournement de filtres en aveugle
- x XPath injection - En aveugle
- x SQL injection - Contournement de filtres