VulnCorp | What is the flag obtained from the debug admin panel accessed through secrets leaked in the exposed git commit history? | Completed | 450 pts |
Quiet Leak | Secrets often hide in plain sight. Can you decode the message to uncover the truth? | Completed | 450 pts |
Quiet Leak | Even the smallest clue can lead to significant findings. Can you determine which file the attacker retrieved from the protected service? | Completed | 250 pts |
Quiet Leak | Hidden services sometimes respond to the right sequence of requests. Can you uncover the exact pattern the attacker used to gain access? (Flag Format: XXXX-XXXX-XXXX) | Completed | 450 pts |
Quiet Leak | Several shared directories were left exposed without proper restrictions. Can you identify the file the attacker retrieved from one of these unsecured locations? | Completed | 450 pts |
TravelEndpoint | Data is only as secure as its weakest link. Can you uncover information that shouldn't be accessible? | Completed | 450 pts |
TravelEndpoint | A system's curiosity can sometimes lead it to unexpected places. Can you make it fetch something valuable? | Completed | 450 pts |
TravelEndpoint | Certain reports are meant for specific eyes only. Can you access what's not meant for you? | Completed | 450 pts |
TravelEndpoint | Sometimes, what you send isn't what's saved. Can you manipulate the system to reveal what's hidden? | Completed | 450 pts |
TravelEndpoint | Some users have more privileges than others. Can you find something they shouldn't have left exposed? | Completed | 450 pts |