CTF Writeups

Web Security Academy - Labs: #

Web LLM attacks #

• Exploiting vulnerabilities in LLM APIs

Insecure deserialization #

• Exploiting PHP deserialization with a pre-built gadget chain
• Exploiting Java deserialization with Apache Commons
• Using application functionality to exploit insecure deserialization
• Arbitrary object injection in PHP
• Modifying serialized data types
• Exploiting Ruby deserialization using a documented gadget chain

File Path Traversal #

• [Absolute Path Bypass](/Web-Security-Academy-File-Path-Traversal Absolute-Path-Bypass)

SQL Injection #

• Blind SQL injection with time delay

Server-side request forgery (SSRF) #

• SSRF with filter bypass via open redirection vulnerability

Cross-site scripting #

• DOM XSS in document.write sink using source location.search inside a select element