Posts with the tag security

This is a writeup of the “bank” challenge, which I was the first to solve, from the Ethereum Paradigm CTF.

I was the first to solve a particularly interesting smart contract challenge in a recent CTF competition. This post explains the vulnerability I found and how to exploit it.

Firestore security rules can use functions and local variables. This allows for refactoring for code reuse and clarity.

Firestore apps can implement rate limiting through security rules, even with untrusted clients.

Combining SSRF, CRLF injection, and a little knowledge of the Redis protocol to topple the HashCache CTF challenge.

Test your hacking skills in this fun Capture the Flag challenge.