CTF-exploits

Port Swigger - Web Security Academy

SQL Injection

• Lab: SQL injection vulnerability in WHERE clause allowing retrieval of hidden data
• Lab: SQL injection vulnerability allowing login bypass
• Lab: SQL injection with filter bypass via XML encoding
• Lab: SQL injection attack, querying the database type and version on Oracle
• Lab: SQL injection attack, querying the database type and version on MySQL and Microsoft
• Lab: SQL injection attack, listing the database contents on non-Oracle databases
• Lab: SQL injection attack, listing the database contents on Oracle
• Lab: SQL injection UNION attack, determining the number of columns returned by the query

PicoCTF

picoCTF 2024

General Skills

• Binary Search
• Time Machine
• Super SSH
• endianness
• Commitment Issues
• Collaborative Development
• Blame Game

Reverse Engineering

• packer

Cryptography

• interencdec

picoCTF 2023

General Skills

• repetitions

picoGym Exclusive

General Skills

• ASCII Numbers
• Big Zip
• First Find

Reverse Engineering

• picker 1
• picker 2
• picker 3
• GDB baby step 1
• GDB baby step 2
• GDB baby step 3

Reversing Challenges

• Simple Buffer Overflow