Posts by paulch

• Sep 18, 2019

  Pwning Master of PHP like it's Real Real World CTF

  In our previous blog post, my teammate Emil has already published a solution for Master of PHP, however, I still want to share another way of solving this challenge, because I think it is quite interesting as well, and it doesn’t require usage of bug that was implanted into no_realworld_php. Instead, in this post we will use recently discovered curl 1-day to achieve stable code execution on the remote host.

• Jun 8, 2018

  Diagon Alley write-up (FAUST CTF 2018)