garigouster 
3290
Place
2975
Points
129
Challenges
0
Compromissions
33%
App - Script
245 Points11 / 33
28%
App - Système
855 Points26 / 93
29%
Cracking
550 Points20 / 70
25%
Cryptanalyse
265 Points19 / 75
0%
Forensic
0 Points0 / 44
31%
Programmation
325 Points9 / 29
0%
Réaliste
0 Points0 / 60
9%
Réseau
20 Points3 / 34
4%
Stéganographie
5 Points1 / 23
- o EXIF - Metadata
- x Point à la ligne
- x Steganomobile
- x Twitter Secret Messages
- x TXT - George et Alfred
- x WAV - Analyse de bruit
- x Poem from Space
- x Points jaunes
- x EXIF - Miniature
- x Mimic - Dummy sight
- x WAV - Analyse spectrale
- x APNG - Just A PNG
- x Crypt-art
- x ELF x64 - Duality
- x PDF - Embedded
- x Genius ID
- x Kitty spy
- x PNG - Least Significant Bit
- x PNG - Pixel Indicator Technique
- x PNG - Pixel Value Differencing
- x Angecryption
- x Base Jumper
- x Hide and seek
19%
Web - Client
75 Points8 / 42
- o HTML - boutons désactivés
- o Javascript - Authentification
- o Javascript - Source
- o Javascript - Authentification 2
- o Javascript - Obfuscation 1
- o Javascript - Obfuscation 2
- o Javascript - Native code
- o Javascript - Webpack
- x Javascript - Obfuscation 3
- x XSS - Stockée 1
- x AST - Deobfuscation
- x CSP Bypass - Inline code
- x CSP Bypass - Nonce 2
- x CSRF - 0 protection
- x Web Socket - 0 protection
- x XSS DOM Based - Introduction
- x Flash - Authentification
- x XSS DOM Based - AngularJS
- x XSS DOM Based - Eval
- x CSP Bypass - Dangling markup
- x CSP Bypass - JSONP
- x CSRF - contournement de jeton
- x XSS - Volatile
- x CSP Bypass - Dangling markup 2
- x CSP Bypass - Nonce
- x CSS - Exfiltration
- x Javascript - Obfuscation 4
- x Relative Path Overwrite
- x XSS - Stockée 2
- x XSS DOM Based - Filters Bypass
- x Self XSS - DOM Secrets
- x CSPT - The Ruler
- x DOM Clobbering
- x Javascript - Obfuscation 6
- x Self XSS - Race Condition
- x Browser - bfcache / disk cache
- x HTTP Response Splitting
- x Javascript - Obfuscation 5
- x XS Leaks
- x XSS - Stored - contournement de filtres
- x XSS - DOM Based
- x Same Origin Method Execution
33%
Web - Serveur
635 Points32 / 96
- o HTML - Code source
- o HTTP - Contournement de filtrage IP
- o HTTP - Open redirect
- o HTTP - User-agent
- o Mot de passe faible
- o PHP - Injection de commande
- x API - Broken Access
- o Fichier de sauvegarde
- o HTTP - Directory indexing
- o HTTP - Headers
- o HTTP - POST
- o HTTP - Redirection invalide
- o HTTP - Verb tampering
- o Install files
- x Nginx - Alias Misconfiguration
- x Nginx - Root Location Misconfiguration
- x API - Mass Assignment
- o CRLF
- o File upload - Double extensions
- o File upload - Type MIME
- x Flask - Unsecure session
- x GraphQL - Introspection
- o HTTP - Cookies
- o Insecure Code Management
- o JWT - Introduction
- x XSS - Server Side
- o Directory traversal
- o File upload - Null byte
- o JWT - Jeton révoqué
- o JWT - Secret faible
- x JWT - Unsecure File Signature
- o PHP - assert()
- x PHP - Configuration Apache
- o PHP - Filters
- x PHP - Register globals
- x PHP - Remote Xdebug
- o Python - Server-side Template Injection Introduction
- o File upload - ZIP
- x Flask - Development server
- x GraphQL - Injection
- x Injection de commande - Contournement de filtre
- x Java - Server-side Template Injection
- o JWT - Clé publique
- x JWT - Header Injection
- o Local File Inclusion
- x Local File Inclusion - Double encoding
- x Nginx - SSRF Misconfiguration
- x Node - Eval
- o PHP - Loose Comparison
- o PHP - preg_replace()
- o PHP - Type juggling
- x Remote File Inclusion
- x SQL injection - Authentification
- x SQL injection - Authentification - GBK
- x SQL injection - String
- x XSLT - Exécution de code
- x Elixir - EEx
- x JWT - Unsecure Key Handling
- x LDAP injection - Authentification
- x Node - Serialize
- x NoSQL injection - Authentification
- x PHP - Path Truncation
- x PHP - Sérialisation
- x SQL injection - Numérique
- x SQL Injection - Routed
- x SQL Truncation
- x XML External Entity
- x XPath injection - Authentification
- x Yaml - Deserialization
- x API - Broken Access 2
- x GraphQL - Backend injection
- x GraphQL - Mutation
- x Java - Spring Boot
- x Local File Inclusion - Wrappers
- x PHP - Eval
- x PHP - Eval - Contournement de filtres avancés
- x SQL injection - Error
- x SQL injection - Insert
- x SQL injection - Lecture de fichiers
- x XPath injection - String
- x File upload - Polyglot
- x NodeJS - Prototype Pollution Bypass
- x NoSQL injection - En aveugle
- x SQL injection - Time based
- x Java - Custom gadget deserialisation
- x NodeJS - vm escape
- x Server Side Request Forgery
- x SQL injection - En aveugle
- x LDAP injection - En aveugle
- x PHP - Unserialize overflow
- x PHP - Unserialize Pop Chain
- x SQL Injection - Second Order
- x Python dotenv
- x Python - SSTI contournement de filtres en aveugle
- x XPath injection - En aveugle
- x SQL injection - Contournement de filtres