bookgin

SE at @microsoft / CTF player in Balsn / Web security and privacy / Learning new stuff

Opinions are my own.

[Balsn @balsnctf]

Balsn CTF 2022 will be on next week (Sep. 3 – Sep. 5).
Registration is now open! 🙂
https://t.co/E7kEL4LKrI

This year, we not only provide interesting and creative challenges but also some beginner-friendly challenges. Don’t forget to join our event! ✨

[bookgin @bookgin_tw]

@orange_8361 @balsnctf @g1n04h 蜜柑王の試練 大好き!!!

[bookgin @bookgin_tw]

We @balsnctf solved all 🍊 web challenges.
@g1n04h is too overpowered!

[bookgin @bookgin_tw]

@aszx87410 cwd 那招好酷！我也是花了好幾個小時最後讀 /proc/mounts 才看到 docker mount volume.......

[bookgin @bookgin_tw]

@CurseRed CTFd 自己都出過了這個 bug 了XD
https://t.co/v3e3PNGpkP

[Balsn @balsnctf]

24 hours left to join Balsn CTF 2021. It's never too late!

https://t.co/uIVPco9xys

There are still unsolved challenges. Come hack with us!

[Balsn @balsnctf]

Balsn CTF 2021 will begin in about 36 hours!
Are you ready for our creative and interesting challenges?

Register here:
https://t.co/eS936tBni4

[Balsn @balsnctf]

Balsn CTF 2021 will be on next week!
Registration is now opened!

https://t.co/eS936tBni4

GIF credit: @g1n04h

[bookgin @bookgin_tw]

@sqrtrev @ZeddYu_Lu Lol I have exactly the same story.

I'm too late to join this challenge at 6 am (UTC+8), and the only service that works is the SSRF one.
Web server is down -> send a ticket -> they fixed it but I always got 500 error -> www retired.

[bookgin @bookgin_tw]

@ZeddYu_Lu @gPayl0ad Oh yeah that's the core concept. Thank you!

[bookgin @bookgin_tw]

@xwlin_roy 我想是這個 reviewer 標準比較高一點

[bookgin @bookgin_tw]

Hmm USENIX is way too hard for me 😅

[bookgin @bookgin_tw]

@po6ix @cyku_tw I use traceroute to solve this challenge. It will send a UDP packet (see busybox traceroute -p) and you can just reply to it with arbitrary payload.

[bookgin @bookgin_tw]

@ZeddYu_Lu Chrome PDF viewer only implements a small set of Adobe API functions. For unsafe functions like submitForm, they require user interaction.

https://t.co/9clQMlqs95

I also dived into the PDF-based XSS, but no luck 😢

[bookgin @bookgin_tw]

@zsxsoft Yeah, it's both web and misc :)

[bookgin @bookgin_tw]

I made two web challenges in Balsn CTF 2020:

Windows XP Media Player (0 solve)
The Woven Web (2 solves)

See the challenges on https://t.co/lLvB2jMYv7 .

[Balsn @balsnctf]

Balsn CTF 2020 is next week!

https://t.co/GFom6kUMmu

The CTF will feature creative and interesting challenges.
We cordially invite you to join this party!

[bookgin @bookgin_tw]

@cschenio Itertools product 然後接 map reduce zip any all 來把程式壓成一行

[Balsn @balsnctf]

Balsn CTF is back! This year, Balsn CTF 2020 will feature creative and interesting challenges. We cordially invite you to join the party. Don’t forget to mark it on your calendar!

Date: 14 Nov. 2020, 10:00 am (UTC+8) ~ 16 Nov. 2020, 10:00 am (UTC+8)

https://t.co/GFom6kDbuW