CTF Challenges writeups

• Beginners contains easy forensic challenges
• Web consists of hard, medium, easy challenge

WEB

• Hackerwiki : Hard challenge and want to heavy bypass to get the ssti
• Bugdrop : Hard challenge, It is the XSS where the PHP contains a way to bypass the CSP.
• magicalgallery : easier but the player want to look the techstack used because it contains the REACT2SHELL vulnerability. It makes hard for AI to find it
• notesapp : It contains a medium level LFI bypass to read the flag