saarsec

While during the CTF, we merely exploited a single vulnerability in this service, we nevertheless took a deeper look into all vulns it contained.

Read more

Although we were a bit late to the party of exploitation, I nevertheless liked the idea behind doodle's vulnerability, so I decided to do a write-up (even if there is not first-blood money coming...)

Read more

Having achieved first blood for this service in the FaustCTF 2017, we, the Saarsec team and in particular the subteam that cracked this service, were given the opportunity to provide a write-up for the Smartscale challenge. Hence. in this write-up we will explain how Smartscale works and how to attack and defend it.

Read more