Challenges

400pt
This service provides website proxy.
https://proxy.canhack.me/
400pt
This service provides read the file.
https://cat.canhack.me/

This challenge was published in the Layer7 CTF 2018.
Sign in as admin, if you can.
The service was developed with Node.js and MongoDB.
The intended solution of this challenge is a vulnerability that is frequently found in these environments.
It's simpler than it looks, so give it a try!
https://signinme.canhack.me/

This challenge was published in the Power Of XX CTF 2018 Finals.
Currently opened 14 challenges.