Web Hack List

Collected research

Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks

Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks - Philippe Dourassov

A CTF talk on unintended solutions whose novel finding is that exceeding PHP's parameter limit raises a warning before page code runs, so the server never sends headers such as CSP, Cache-Control or Content-Type. It also covers cookie theft across challenges on different ports of one host, cracking weakly encrypted archived sources, and outdated headless browsers.

Record

Document
Secret Web Hacking Knowledge: CTF Authors Hate These Simple Tricks - Philippe Dourassov
Researcher
Philippe Dourassov
Published by
download.scrt.ch
Date
Format
Recording
Topic
Other

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Philippe Dourassov, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .