POJIA破甲
地图 / H1-5411 CTF Write-up by erbbysam and ziot

H1-5411 CTF Write-up by erbbysam and ziot

注入与走私 / 资源注入 / #415137

厂商
h1-5411-CTF
严重程度
未评级
赏金
—
弱点
资源注入
研究员
@ziot
披露日期
2018-10-22
资产
—
CVE
—

该报告还没有中文解读。

原文摘录

摘自原文(15380 字符中的一小部分)
@erbbysam and I recently set out to beat the latest CTF challenge hosted by HackerOne. Here is a write-up with the process we took from start to finish.
原文中的代码
POST /api/generate.php HTTP/1.1
Host: h1-5411.h1ctf.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: https://h1-5411.h1ctf.com/generate.php
Content-Type: …

默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 h1-5411-CTF 所有。

时间线

  • 报告提交
  • 公开披露
阅读 HackerOne 原文 ↗作者 @ziot · 版权归作者与 h1-5411-CTF 所有

同类报告

Arbitrary local system file read on open-xchange serverOpen-Xchange · — · $2,000Nextcloud Desktop Client RCE via malicious URI schemesNextcloud · 2021-04-15 · $1,000[Xenoblade Chronicles X: Definitive Edition] Unrestricted RPCs allow DoS and writing arbitrary flags remotelyNintendo · 2025-05-15HTML injection possible with soft email confirmations when Administrator manually confirms attacker email addressGitLab · 2024-10-08 · $1,060Content injection in Jira issue title enabling sending arbitrary POST request as victimGitLab · 2022-09-22Arbitrary POST request as victim user from HTML injection in Jupyter notebooksGitLab · 2022-05-20