vicevirus’ Blog
Yo, welcome to my blog! I write tech stuff and play CTFs for fun. (still a noob)
WGMY
2024-12-29
Wargames.my WGMY 2024 Web Write-up
Wargames.my 2024 Web Writeup - Writeup on some of the web challenges in WGMY 2024. Twig php argc_argv template injection, kubernetes auth vault reading, vulnerable Wordpress plugin leading to LFI/LFR, OpenRASP bypass by loading custom/external class
2023-12-18
[Web] Report Google Wargames.my CTF 2023
Write-up on Report Google Wargames.my 2023. Using open redirect on Google to steal cookies.
2023-12-16
[Web] Warmup - Web Wargames.my CTF 2023
Write-up on Warmup - Web Challenge Wargames.my 2023. Using php:// wrapper to leak out flag inside PHP comment.