https://hussienmisbah.github.io/categories/web-exploitation/ Recent content in Web Exploitation on 0xMesbaha Hugo en Sun, 04 Jun 2023 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2023-06-04-justctf_extra-safe-security-layers/ Sun, 04 Jun 2023 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2023-06-04-justctf_extra-safe-security-layers/ <p>This Challenge is about exploiting cross site scripting with a strict CSP in place along with XSS Santizer and other restrictions , the interesting part in this blog is about learning the root cause and idenfiy exploit points. the challenge may seem very easy and it is easy and fun indeed.</p> https://hussienmisbah.github.io/posts/web-exploitation/2022-10-01-meme-generator/ Sat, 01 Oct 2022 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2022-10-01-meme-generator/ <p>This challenge was in Blackhat CTF Qualifications 2022 and we have participated under the team 0xCha0s, we have managed to solve multiple challenges. this challenge was ranked medium for 250 pts .</p> https://hussienmisbah.github.io/posts/web-exploitation/2022-08-06-kenzy/ Sat, 06 Aug 2022 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2022-08-06-kenzy/ <p>This Challenge is From Arab Security WarGames 2022 qualificatons , we managed to solve it intime and qualify to finals round.</p> https://hussienmisbah.github.io/posts/web-exploitation/2022-07-25-flused-emoji/ Mon, 25 Jul 2022 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2022-07-25-flused-emoji/ <p>Lexington Informatics Tournament CTF CTF 2022 was held from the 22nd of July Until the 25th of the month , and we have participated under the team 0xcha0s, we have managed to solve multiple challenges. this challenge was solved less than 50 times in the 3 days and it was really nice.</p> https://hussienmisbah.github.io/posts/web-exploitation/2022-05-19-kryptos-support/ Thu, 19 May 2022 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2022-05-19-kryptos-support/ <p>HTB Cyber Apocalypse CTF 2022 was held from the 14th of May Until the 19th of the month , and we have participated under the team 0xcha0s, we have managed to solve multiple challenges. this challenge was ranked easy</p> https://hussienmisbah.github.io/posts/web-exploitation/2022-05-02-hacker-ts/ Mon, 02 May 2022 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2022-05-02-hacker-ts/ <p>Nahamcon ctf 2022 was held from the 28th of April Until the 30th of the month , and we have participated under the team 0xcha0s. this challenge idea was pretty new to me so it is helpful to document it in this writeup</p> https://hussienmisbah.github.io/posts/web-exploitation/2022-04-17-sql-tutor/ Sun, 17 Apr 2022 12:49:18 +0200 https://hussienmisbah.github.io/posts/web-exploitation/2022-04-17-sql-tutor/ <p>DCTF 2022 was held from the 15th of April Until the 17th of the month , and we have participated under the team 0xcha0s, we have managed to solve multiple challenges. this challenge was ranked easy.</p>