Cybersecurity
(Last updated: 17th Oct 2020)
H4c3rM4n challenges, competitions and contributions I have done. Everything done with good intent!
I am the founder and leader of the CTF team CaptureTheFrancesinha, with whom I participate in most CTFs.
Writeups may appear if I have spare time.
zerozero.pt
Vulnerability on the Search feature where the filtering was not strong enough to completely prevent code injection.
- XSS
Bounty program: None
Reward: None
CDUP-UP website
Problem with the reservation system where the reservation request could be manipulated, making it possible to set prices to zero, extend times, etc.
- Weak Encryption
- Web Parameter Tampering
Bounty program: None
Reward: None
Taikai
Vulnerability on the Login form when using external sources (Github or Google).
- Open Redirect
Bounty program: None
Reward: Swag
CTT
Vulnerability on the Logout page and the "go back" feature.
- Open Redirect
Bounty program: None
Reward: None
Behemoth [2/9]
9 levels of more advanced pwn challenges.
- Pwn
Narnia [2/7]
7 levels of binary exploitation challenges.
- Pwn
Krypton [7/7]
Wargame with 7 levels related to Cryptography.
- Cryptography
Leviathan [8/8]
Wargame that introduces some Reverse and Pwn challenges.
- Linux
- Reverse
- Pwn
Natas [35/35]
Wargame related to serverside web-security.
- Web
Bandit [34/34]
Beginner level wargame that teaches interesting linux commands and features.
- Linux