Insecure Code Management

20 Points

Protect your code management server?

Author

Swissky, 29 September 2019

Level

Validations

3205 Challengers 2%

Note

215 Votes

To reach this part of the site please login

6 Solutions

Display solutions Submit a solution

Challenge Results

Pseudo	Challenge	Lang	date
andy	Insecure Code Management		31 March 2020 at 06:24
Un1c0n0R	Insecure Code Management		31 March 2020 at 02:46
hymp	Insecure Code Management		30 March 2020 at 23:09
Jean-Benoit	Insecure Code Management		30 March 2020 at 22:45
j0v	Insecure Code Management		30 March 2020 at 21:16
thanhson	Insecure Code Management		30 March 2020 at 18:32
Ӝ̵̨̄Skod	Insecure Code Management		30 March 2020 at 17:31
billbucket	Insecure Code Management		30 March 2020 at 17:20
philistin	Insecure Code Management		30 March 2020 at 16:37
Patrick	Insecure Code Management		30 March 2020 at 15:34

63 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution
	HTML - Source code	49% 84712	5		g0uZ		3
	HTTP - Open redirect	18% 30605	10		Swissky		10
	HTTP - User-agent	25% 42233	10		g0uZ		10
	Weak password	34% 59384	10		g0uZ		7
	PHP - Command injection	17% 29322	10		sambecks		10
	Backup file	17% 29661	15		g0uZ		7
	HTTP - Directory indexing	24% 41203	15		g0uZ		4
	HTTP - Headers	16% 27761	15		Arod		9
	HTTP - POST	12% 19988	15		Th1b4ud		10
	HTTP - Improper redirect	13% 21422	15		Arod		10
	HTTP - Verb tampering	15% 24795	15		g0uZ		10
	Install files	15% 24769	15		g0uZ		2
	CRLF	10% 16216	20		g0uZ		7
	File upload - Double extensions	11% 18547	20		g0uZ		9
	File upload - MIME type	9% 14502	20		g0uZ		8
	HTTP - Cookies	14% 23274	20		g0uZ		7
	Insecure Code Management	2% 3206	20		Swissky		6
	JSON Web Token (JWT) - Introduction	3% 3676	20		Knowledge		4
	Directory traversal	11% 19143	25		g0uZ		3
	File upload - Null byte	8% 13291	25		g0uZ		4
	JSON Web Token (JWT) - Weak secret	2% 2475	25		Jrmbt		5
	JWT - Revoked token	1% 109	25		ArnC		0
	PHP - assert()	5% 7746	25		Birdy42		9
	PHP - Filters	7% 11585	25		g0uZ		3
	PHP - register globals	6% 9643	25		g0uZ		1
	PHP - Remote Xdebug	1% 105	25		mayfly		1
	File upload - ZIP	3% 4587	30		ghozt		3
	Command injection - Filter bypass	2% 3416	30		sambecks		6
	Java - Server-side Template Injection	4% 5498	30		righettod		4
	JSON Web Token (JWT) - Public key	1% 1122	30		Jrmbt		2
	Local File Inclusion	9% 14774	30		g0uZ		4
	Local File Inclusion - Double encoding	5% 7099	30		zM		3
	PHP - Loose Comparison	3% 3562	30		ghozt		4
	PHP - preg_replace()	4% 5426	30		sambecks		4
	PHP - type juggling	3% 5227	30		vic		4
	Remote File Inclusion	4% 6372	30		g0uZ		8
	SQL injection - Authentication	13% 21952	30		g0uZ		11
	SQL injection - Authentication - GBK	3% 4773	30		dvor4x		3
	SQL injection - String	6% 10066	30		g0uZ		8
	XSLT - Code execution	2% 1846	30		ghozt		5
	LDAP injection - Authentication	4% 5815	35		g0uZ		8
	NoSQL injection - Authentication	3% 4427	35		mastho		8
	PHP - Path Truncation	2% 3303	35		Geluchat		4
	PHP - Serialization	3% 4006	35		Arod		2
	SQL injection - Numeric	5% 7551	35		g0uZ		6
	SQL Injection - Routed	2% 2293	35		soka		5
	SQL Truncation	3% 3562	35		Geluchat		2
	XML External Entity	2% 2717	35		sambecks		2
	XPath injection - Authentication	3% 4264	35		g0uZ		5
	Java - Spring Boot	1% 1258	40		dvor4x		2
	Local File Inclusion - Wrappers	1% 1732	40		sambecks		4
	PHP - Eval	1% 1432	40		chmod		9
	SQL injection - Error	3% 3723	40		sambecks		4
	SQL injection - Insert	1% 1583	40		sambecks		3
	SQL injection - File reading	2% 2886	40		Arod		3
	XPath injection - String	2% 2363	40		g0uZ		5
	NoSQL injection - Blind	1% 1609	45		ghozt		5
	SQL injection - Time based	2% 2728	45		ycam		4
	Server Side Request Forgery	1% 623	50		sambecks		4
	SQL injection - Blind	3% 4081	50		g0uZ		4
	LDAP injection - Blind	1% 1745	55		g0uZ		1
	XPath injection - Blind	1% 1203	75		g0uZ		4
	SQL injection - Filter bypass	1% 1218	80		sambecks		5