Party Cat0%

My Labs

How JSON–JavaScript Discrepancy Leads to RCE (Lodash)

0xL4ugh v5

Hard
CTFRCE0-day

Next.js DNS Rebinding, Python CRLF & pdfkit Injection

0xL4ugh v5

Hard
CTFDNS RebindingSSRFCRLF InjectionRCE0-day

Mushroom Hates Letters

IEEE 2025 Finals

Easy
Command-InjectionLinux

Disapproved

IEEE 2025 Finals

Medium
CTFCSP-BypassXSSSource-Code-ReviewCSRFPath Traversal

Full Stack Disaster

Connectors CTF 25

Hard
CSP-BypassSSRFFile-UploadXSSSource-Code-ReviewSSTICSRFNGINXRCEPath Traversal

cat flag.png

Connectors CTF 25

Medium
Command-Injection

The Promotion

Connectors CTF 25

Medium
SQL-InjectionJWT

Flags in the air

Connectors CTF 25

Medium
Source-Code-ReviewCommand-Injection

Osint Conectors CTF 25

Connectors CTF 25

Easy
OSINT

Stylish Boss

CAT CTF 25

Medium
CSS-InjectionCommand-Injection

Underground Maze

CAT CTF 25

Medium
2FA-BypassCache-DeceptionSSRFSSTI