Event: CSAW CTF 2024 Qualifiers
Category: Web
Summary: Requires JWT algorithm confusion (CVE-2022-29217) to gain unauthorized access.
Challenge Source
Event: CSAW CTF 2024 Finals
Category: Web
Summary: Centers around crafting malicious polyglot WebP image/JS script to trigger stored XSS.
Challenge Source
Event: CSAW CTF 2024 Qualifiers
Category: Forensics
Summary: Involves the analysis of a covert TCP-based exfiltration channel.
Challenge Source