Overview
Learn how to exploit web security vulnerabilities through a detailed walkthrough video of the "Feature Unlocked" challenge from CyberSpace CTF 2024. Master advanced techniques including cookie forgery, custom signature generation and verification, and blind command injection to gain unauthorized access to hidden features. Follow along with practical demonstrations of exploiting validation server hijacking via hidden GET parameters, implementing cookie forgery attacks, and executing blind data exfiltration. Gain hands-on experience with web security concepts while exploring the complete solution path from initial source code review through successful exploitation.
Syllabus
Start
Source code review
Cookie forgery
Recreate validation server
Access unlocked feature
Command injection
Blind exfiltration
End
Taught by
CryptoCat