CTF

XML injection

XXE XML External Entity <?xml version="1.0"?> <!DOCTYPE root [<!ENTITY test SYSTEM 'file:///etc...

CMD injection

Shell single quote For date '$FORMAT' FORMAT '; cat /flag' Gives date ''; cat /flag''

ZIP cracking

Known plaintext (file) https://github.com/keyunluo/pkcrack Need one exact file in plaintext fro...

SSTI - Server Side Template Injections

Server Side Template Injections Template injections examples Java - Velocity Runs command Gets...

IRB

Chunk s.scan(/......./) Binary to integer s.to_i(2) Integer to ASCII character 123.chr Hex to ...