Insecure Code Management

20 Points

Protect your code management server?

Author

Swissky, 29 September 2019

Level

Validations

2446 Challengers 2%

Note

162 Votes

To reach this part of the site please login

6 Solutions

Display solutions Submit a solution

Challenge Results

Pseudo	Challenge	Lang	date
wechhu	Insecure Code Management		29 January 2020 at 07:29
neoxquick	Insecure Code Management		28 January 2020 at 22:46
vladimir	Insecure Code Management		28 January 2020 at 21:59
Mubol	Insecure Code Management		28 January 2020 at 21:36
IDontKnOw	Insecure Code Management		28 January 2020 at 21:25
mut4t3dblu3	Insecure Code Management		28 January 2020 at 21:07
Emeric	Insecure Code Management		28 January 2020 at 21:01
cactuschibre	Insecure Code Management		28 January 2020 at 18:36
wh1teRay	Insecure Code Management		28 January 2020 at 18:34
kiwily98	Insecure Code Management		28 January 2020 at 18:01

61 Challenges

Results	Name	Validations	Number of points	Difficulty	Author	Note	Solution
	HTML - Source code	48% 80490	5		g0uZ		3
	HTTP - Open redirect	17% 28457	10		Swissky		10
	HTTP - User-agent	24% 40046	10		g0uZ		10
	Weak password	34% 56698	10		g0uZ		7
	PHP - Command injection	17% 27267	10		sambecks		10
	Backup file	17% 28352	15		g0uZ		7
	HTTP - Directory indexing	24% 39274	15		g0uZ		4
	HTTP - Headers	16% 26375	15		Arod		9
	HTTP - POST	11% 18240	15		Th1b4ud		10
	HTTP - Improper redirect	13% 20280	15		Arod		10
	HTTP - Verb tampering	15% 23714	15		g0uZ		10
	Install files	15% 23728	15		g0uZ		2
	CRLF	10% 15405	20		g0uZ		7
	File upload - Double extensions	11% 17683	20		g0uZ		9
	File upload - MIME type	9% 13800	20		g0uZ		8
	HTTP - Cookies	14% 22105	20		g0uZ		7
	Insecure Code Management	2% 2453	20		Swissky		6
	JSON Web Token (JWT) - Introduction	2% 2884	20		Knowledge		4
	Directory traversal	11% 18278	25		g0uZ		3
	File upload - Null byte	8% 12713	25		g0uZ		4
	JSON Web Token (JWT) - Weak secret	2% 1920	25		Jrmbt		5
	PHP - assert()	5% 7349	25		Birdy42		9
	PHP - Filters	7% 11076	25		g0uZ		3
	PHP - register globals	6% 9230	25		g0uZ		1
	File upload - ZIP	3% 4267	30		ghozt		3
	Command injection - Filter bypass	2% 3162	30		sambecks		6
	Java - Server-side Template Injection	4% 5211	30		righettod		4
	JSON Web Token (JWT) - Public key	1% 942	30		Jrmbt		2
	Local File Inclusion	9% 14189	30		g0uZ		3
	Local File Inclusion - Double encoding	5% 6747	30		zM		3
	PHP - Loose Comparison	2% 3308	30		ghozt		4
	PHP - preg_replace()	4% 5195	30		sambecks		4
	PHP - type juggling	3% 4951	30		vic		4
	Remote File Inclusion	4% 6074	30		g0uZ		8
	SQL injection - Authentication	13% 20799	30		g0uZ		11
	SQL injection - Authentication - GBK	3% 4445	30		dvor4x		3
	SQL injection - String	6% 9570	30		g0uZ		8
	XSLT - Code execution	2% 1732	30		ghozt		5
	LDAP injection - Authentication	4% 5597	35		g0uZ		8
	NoSQL injection - Authentication	3% 4239	35		mastho		8
	PHP - Path Truncation	2% 3164	35		Geluchat		4
	PHP - Serialization	3% 3862	35		Arod		2
	SQL injection - Numeric	5% 7221	35		g0uZ		6
	SQL Injection - Routed	2% 2151	35		soka		5
	SQL Truncation	3% 3394	35		Geluchat		2
	XML External Entity	2% 2571	35		sambecks		2
	XPath injection - Authentication	3% 4119	35		g0uZ		5
	Java - Spring Boot	1% 1150	40		dvor4x		2
	Local File Inclusion - Wrappers	1% 1639	40		sambecks		4
	PHP - Eval	1% 1313	40		chmod		9
	SQL injection - Error	3% 3523	40		sambecks		4
	SQL injection - Insert	1% 1503	40		sambecks		3
	SQL injection - File reading	2% 2725	40		Arod		3
	XPath injection - String	2% 2253	40		g0uZ		5
	NoSQL injection - Blind	1% 1510	45		ghozt		5
	SQL injection - Time based	2% 2545	45		ycam		4
	Server Side Request Forgery	1% 564	50		sambecks		4
	SQL injection - Blind	3% 3932	50		g0uZ		4
	LDAP injection - Blind	1% 1665	55		g0uZ		1
	XPath injection - Blind	1% 1131	75		g0uZ		4
	SQL injection - Filter bypass	1% 1139	80		sambecks		5