BroncoCTF: Lovely Login
Executive Summary Lovely Login presents a minimal "Secure Database" login form backed by an Express API at /login. The obvious attack surface — NoSQL operator injection on username/password — turned o
Jul 12, 20265 min read17
Command Palette
Search for a command to run...
#broncoctf
Articles tagged with #broncoctf
BroncoCTF : Super Secure Server
Executive Summary Super Secure Server presents a login form that appears to check a username and password, but does nothing of the sort. The page's own JavaScript fetches the "secret" credentials from
Jul 12, 20264 min read3
BroncoCTF : Unblur me Writeup
Challenge A web page at https://broncoctf-unblur-me.chals.io/ presents a "Calculus Review" quiz: Solve 500 derivatives to unblur the image and unlock a secret. Progress: 0 / 500 A blurred image sits
Jul 12, 20264 min read9
BroncoCTF : Spot the difference Writeup
Challenge We're given two files, file1.txt and file2.txt, each containing what looks like a long, random blob of letters, digits, and symbols — one character per line. At a glance the two files look i
Jul 12, 20264 min read11
BronoCTF : No Laughing Matter
Challenge A single file, aha.txt, containing nothing but space-separated 8-letter "words" made up of only two characters: A and H. $ cat aha.txt AHHAAAHA AHHHAAHA AHHAHHHH AHHAHHHA AHHAAAHH AHHAHHHH A
Jul 12, 20262 min read14