diff --git a/2020/Misc/Secure-Note/README.md b/2020/Misc/Secure-Note/README.md new file mode 100644 index 0000000..59611b2 --- /dev/null +++ b/2020/Misc/Secure-Note/README.md @@ -0,0 +1,14 @@ +# SecureNote + +**Description** +Building Secure Applications is hard! But we tried. Can you get the flag from Secure Note? +You might need to dig deep into your skills for this one. +(PS: The challenge requires no automated testing tools! using them == instant ban) + +**Author**: [r3x](https://twitter.com/Tr3x__) & [4lph4](https://twitter.com/__4lph4__) + +**Short writeup** ++ Challenge involves Reversing, Web, and Crypto ++ Reverse the binary to get the endpoints ++ Trigger the XSS bug in the website and get admin cookie ++ Use Hash Length extension attack to get authenticated as admin and get the flag