Root Me : plateforme d'apprentissage dédiée au Hacking et à la Sécurité de l'Information

CSPT - The Ruler

Rolix , Mizu — 2024-09-27T12:02:20Z

A friend has just opened a site to make life easier for CTF organizers by proposing pre-made rules.
You have absolutely no doubts about the veracity of these rules, but you do have doubts about the security of his site.

Find a way to get administrator access and show your friend that there are rules for development too.

- Web - Client

Self XSS - DOM Secrets

Mizu — 2023-07-28T18:43:22Z

A rather simplistic secret management platform has just been released. The application's security prevents javascript from accessing any secret information. Nevertheless, find a way to obtain the admin's secret.

- Web - Client

Self XSS - Race Condition

Mizu — 2023-07-28T18:43:05Z

The secret management platform has understood the error and has consequently blocked all the possibilities of your previous operation. Nevertheless, find a way to obtain the admin's secret.

- Web - Client

Same Origin Method Execution

Mizu — 2023-07-28T18:42:49Z

After the last two vulnerabilities you reported, the secret management platform has decided to invest even more money in security. Still, find a way to get the admin's secret.

- Web - Client

Browser - bfcache / disk cache

Mizu — 2023-07-28T18:42:31Z

This challenge is intended for Chromium-based browsers.

A screenshot service has been made available. The site also hosts the developer's secret (/flag), which can only be accessed internally. You have the site's sources at your disposal, so find a way to access them.

- Web - Client

Relative Path Overwrite

Mizu — 2023-07-28T18:42:06Z

A new file storage site has been launched. It aims to be light, secure and free, enabling anyone to store and access their files quickly. However, it seems that the developer made a small mistake in developing it. Can you spot it ?

It is not necessary to root the virtual machine, so there is no /passwd to recover.
The web server is accessible on port 8080

WARNING : The bot doesn't have access to the internet and files are cleared very regularly

Démarrer le CTF all the day

- Web - Client

CSP Bypass - Nonce 2

Ruulian — 2023-06-27T09:58:40Z

A developer who loves colors decided to put a site online after being hacked. Since his trauma, he is unbeatable in CSP and is now confident....
Show him that you can steal his cookies and save him from another trauma !

- Web - Client

AST - Deobfuscation

mhoste , Lxt3h — 2023-06-27T09:58:02Z

HessKamai has released version 2.0, and they believe that nothing and nobody will be able to reproduce the sensor generation. Your friend has sent you an AST, so it's up to you to prove to them that their anti-bot is reversible.

- Web - Client

Javascript - Obfuscation 6

n3rada — 2023-04-27T10:34:00Z

Welcome to LeakIdea 😎 !

You work to protect digital works using various techniques, such as web scraping. Your mission is to study the functioning of a pirate site (CSS/HTML structure, JS deobfuscation, etc.) to understand the security mechanisms in place and thus optimize Python bots that will simulate the behavior of a user.

At first glance, it seems that the content is simply indexed and that it would be easy to retrieve the cyberlocker hidden behind. Think again ! I just discovered a site, rmovies.love, which decrypts the URLs returned by the API in a very unusual way.

I'm stuck and I need your help ! I can't figure out what's going on. I need you to find the decryption function so I can launch my bot against this site and prepare my DMCA requests.

To make your task easier, I've extracted specific elements from the site for you, so you can focus solely on the deobfuscation of this darn code !

Good luck and keep me posted on your progress.

- Web - Client

XS Leaks

Mizu — 2022-04-08T06:06:49Z

Warning : This challenge cannot be solved on the following web browsers : Brave, Edge.

After having completed his chating site with failure, your friend comes back to you with a note management site. He explains you that he blocked all injections and that it is therefore impossible to recover information on users. You start to tell him about XS-Leak but he doesn't seem to understand. You decide to show him that not only user entries are important.

Your goal : get the name of a note from the admin.

Information : The flag is in lowercase

- Web - Client