Insecure Code Management

20 Points

Protect your code management server?

Author

Swissky, 29 September 2019

Level

Validations

659 Challengers 1%

Note

52 Votes

To reach this part of the site please login

Solution

Submit a solution

Challenge Results

Pseudo	Challenge	Lang	date
romrawin srirad	Insecure Code Management		15 October 2019 at 05:36
Bismarck	Insecure Code Management		15 October 2019 at 02:26
Bi@иco	Insecure Code Management		15 October 2019 at 01:12
tetros9	Insecure Code Management		15 October 2019 at 01:08
0xh311	Insecure Code Management		14 October 2019 at 23:57
bUst4gr0	Insecure Code Management		14 October 2019 at 22:13
flipfloop	Insecure Code Management		14 October 2019 at 21:50
cybernite	Insecure Code Management		14 October 2019 at 21:23
Feztix	Insecure Code Management		14 October 2019 at 18:30
Zidan	Insecure Code Management		14 October 2019 at 17:57

61 Challenges

Results	Challenge's Name	Validations	Number of points	Difficulty	Author	Note	Solution
	HTML - Source code	48% 72954	5		g0uZ		3
	HTTP - Open redirect	17% 24747	10		Swissky		10
	HTTP - User-agent	24% 36405	10		g0uZ		10
	Weak password	35% 52190	10		g0uZ		5
	PHP - Command injection	16% 23907	10		sambecks		10
	Backup file	18% 26149	15		g0uZ		7
	HTTP - Directory indexing	24% 35989	15		g0uZ		4
	HTTP - Headers	16% 24009	15		Arod		8
	HTTP - POST	10% 15258	15		Th1b4ud		10
	HTTP - Improper redirect	13% 18362	15		Arod		10
	HTTP - Verb tampering	15% 21860	15		g0uZ		10
	Install files	15% 21958	15		g0uZ		2
	CRLF	10% 14083	20		g0uZ		7
	File upload - Double extensions	11% 16203	20		g0uZ		9
	File upload - MIME type	9% 12581	20		g0uZ		8
	HTTP - Cookies	14% 20202	20		g0uZ		7
	Insecure Code Management	1% 662	20		Swissky		0
	JSON Web Token (JWT) - Introduction	1% 1359	20		Knowledge		3
	Directory traversal	12% 16905	25		g0uZ		3
	File upload - Null byte	8% 11746	25		g0uZ		4
	JSON Web Token (JWT) - Weak secret	1% 874	25		Jrmbt		3
	PHP - assert()	5% 6672	25		Birdy42		8
	PHP - Filters	7% 10287	25		g0uZ		3
	PHP - register globals	6% 8614	25		g0uZ		1
	File upload - ZIP	3% 3769	30		ghozt		3
	Command injection - Filter bypass	2% 2814	30		sambecks		6
	Java - Server-side Template Injection	4% 4775	30		righettod		4
	JSON Web Token (JWT) - Public key	1% 494	30		Jrmbt		1
	Local File Inclusion	9% 13161	30		g0uZ		3
	Local File Inclusion - Double encoding	5% 6227	30		zM		3
	PHP - Loose Comparison	2% 2928	30		ghozt		4
	PHP - preg_replace()	4% 4766	30		sambecks		4
	PHP - type juggling	3% 4551	30		vic		4
	Remote File Inclusion	4% 5653	30		g0uZ		8
	SQL injection - Authentication	13% 18985	30		g0uZ		11
	SQL injection - Authentication - GBK	3% 3923	30		dvor4x		3
	SQL injection - String	6% 8723	30		g0uZ		8
	XSLT - Code execution	1% 1523	30		ghozt		5
	LDAP injection - Authentication	4% 5204	35		g0uZ		8
	NoSQL injection - Authentication	3% 3876	35		mastho		8
	PHP - Path Truncation	2% 2895	35		Geluchat		4
	PHP - Serialization	3% 3610	35		Arod		2
	SQL injection - Numeric	5% 6692	35		g0uZ		6
	SQL Injection - Routed	2% 1891	35		soka		5
	SQL Truncation	3% 3140	35		Geluchat		2
	XML External Entity	2% 2345	35		sambecks		2
	XPath injection - Authentication	3% 3897	35		g0uZ		4
	Java - Spring Boot	1% 992	40		dvor4x		2
	Local File Inclusion - Wrappers	1% 1459	40		sambecks		4
	PHP - Eval	1% 1104	40		chmod		9
	SQL injection - Error	3% 3208	40		sambecks		4
	SQL injection - Insert	1% 1375	40		sambecks		3
	SQL injection - File reading	2% 2493	40		Arod		2
	XPath injection - String	2% 2075	40		g0uZ		4
	NoSQL injection - Blind	1% 1338	45		ghozt		5
	SQL injection - Time based	2% 2331	45		ycam		2
	Server Side Request Forgery	1% 464	50		sambecks		3
	SQL injection - Blind	3% 3683	50		g0uZ		4
	LDAP injection - Blind	1% 1513	55		g0uZ		1
	XPath injection - Blind	1% 1007	75		g0uZ		4
	SQL injection - Filter bypass	1% 993	80		sambecks		5