kunte_

CTF Player with @FluxFingers | Ph.D. Student

[slonser @slonser_]

I really love this poll because it lets you discover a lot of great research from the past year that you might have missed.
I've decided to highlight the Сlient-Side related research that I think is especially worth your attention.

[FluxFingers @fluxfingers]

Shop is closed! We hope you had a lot of fun playing this year’s Hack.​lu CTF!

Congratulations to everybody who solved challenges and especially the winners:

🥳 Congrats to the winners! 🎉 💪
🥇 @kalmarunionenDM
🥈 @justCatTheFish
🥉 @0rganizers
https://t.co/e8nHgLE8B8

[FluxFingers @fluxfingers]

Hej!

We are thrilled to announce @hack_lu CTF 2025 starts on Friday, October 17.

Top teams can win prizes from our sponsors: OffensiveCon, Zellic, PortSwigger, Binary Ninja, and HackTheBox.

All information on https://t.co/7RrfeQKgHV

[FluxFingers @fluxfingers]

Hacklu CTF is still running for ~23h! We still have some unsolved challenges, including:
- 📱Android Flutter exploitation
- 🦊 2 webs with Firefox bots
- 🐒 pwning a 17 year old SpiderMonkey
- ✍️ LaTeX madness

Come play: https://t.co/7RrfeQJISn

[kunte_ @kunte_ctf]

Webs Webs Webs Webs Webs

[FluxFingers @fluxfingers]

🏋️ Time to warm up your muscles for @hack_lu CTF! We hope you didn't skip flag day, otherwise you'll be sweating trying to catch up 🥵

CTF starts Oct 18, 18:00 UTC, registration is now open:
https://t.co/j2T7ZcL6X0

[realansgar @realansgar]

I found XSS in Roundcube and released a new announcement blog post about it today.
Already excited to share the full details in a few weeks after people patched :)

[pspaul @pspaul95]

Super excited to present this research at DEF CON! If you think SQL Injections have become a boring and repetitive topic, think again. There's a whole new layer to explore 👀

[Florian @fh4ntke]

Can server-side scanning research be legal and ethical? For our upcoming @IEEESSP paper "Where are the red lines?" we talked to experts on law and ethics, and web operators. We discussed challenges, solutions and various fictional research scenarios. https://t.co/cTjFfiVRRl

[kunte_ @kunte_ctf]

@RBTree_ We had SSH 1.0 TSS Cipher 0-Day , Tweakable AES, Classic McEliece, ECDSA Partial Nonce reuse

[FluxFingers @fluxfingers]

Hacklu CTF is running at full steam with still ~23h left! 🚩
We got some great challenges waiting for you, including a 28-year-old 0-day in SSH, a Mastodon n-day, a QEMU escape, and many many more.

Come try your luck 🎱👉 https://t.co/7RrfeQJISn

[FluxFingers @fluxfingers]

The game is on! You have 48h to prove your luck 👉 https://t.co/7RrfeQJISn

[pspaul @pspaul95]

Super excited to publish this blog post! One of the most fun bugs I exploited so far, had to get creative and lose my mind reading the CSS spec for 2 days 🙃

[kunte_ @kunte_ctf]

@0xchrisb @PortSwiggerRes Js is funny 🙃🙃

on https://t.co/sCqO3bC0CU)
eval(unescape(location.href))

[- @lambdafu]

✨Our paper "Isolated and Exhausted: Attacking Operating Systems via Site Isolation in the Browser" will appear at USENIX Security '23 and is now available as a preprint: https://t.co/rp4DqVmXqV
This work is by Matthias Gierlings, me (@lambdafu), and @JoergSchwenk 🧵👇

[kunte_ @kunte_ctf]

Just for completeness here is my solve script: https://t.co/XyYCi4Mn8z

For anyone that wants another challenge try exploit this, with mysql instead of sqlite. 😈

[terjanq @terjanq]

Helped @justCatTheFish with yet another ctf and solved two highest scored challenges: HTPL from @BitK_ and foodAPI from @kunte_ctf. The former was a JS sandbox escape and the latter was about 0day in #denodb. Some useful tricks 🙃

https://t.co/3IqqiupHAi

#hacklu @fluxfingers

[terjanq @terjanq]

Helped @justCatTheFish with yet another ctf and solved two highest scored challenges: HTPL from @BitK_ and foodAPI from @kunte_ctf. The former was a JS sandbox escape and the latter was about 0day in #denodb. Some useful tricks 🙃

https://t.co/3IqqiupHAi

#hacklu @fluxfingers

[FluxFingers @fluxfingers]

The Hacklu 2022 CTF is over!

Thank you for playing!

Of course special congrats to the top 3 teams! 🥳 🏆
🥇 organizers
🥈 justCatTheFish
🥉 💦

CTF: https://t.co/rbPY4FAEo3

Challenges will still be up for a while. See you next Year!

#hacklu #ctf @fluxfingers

[FluxFingers @fluxfingers]

Less than 24h until Hacklu CTF 2022 and the registration is now open! Sign up at https://t.co/7RrfeQJISn and prepare yourself for the finest hacking.
#Hack_lu #CTF

[Philesiv @Philesiv]

I just published XSLeaker a tool that helps you to find potential #XSLeak vulnerabilities.
https://t.co/uG2t10vKQR

[kunte_ @kunte_ctf]

@freddyb @arndissler fixed :)