From 82ee175c29ee54dafc850bd49402156c6e7be879 Mon Sep 17 00:00:00 2001 From: Sowmya6320 Date: Fri, 14 Aug 2020 22:06:51 +0530 Subject: [PATCH] README added --- 2020/Misc/Secure-Note/README.md | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 2020/Misc/Secure-Note/README.md diff --git a/2020/Misc/Secure-Note/README.md b/2020/Misc/Secure-Note/README.md new file mode 100644 index 0000000..59611b2 --- /dev/null +++ b/2020/Misc/Secure-Note/README.md @@ -0,0 +1,14 @@ +# SecureNote + +**Description** +Building Secure Applications is hard! But we tried. Can you get the flag from Secure Note? +You might need to dig deep into your skills for this one. +(PS: The challenge requires no automated testing tools! using them == instant ban) + +**Author**: [r3x](https://twitter.com/Tr3x__) & [4lph4](https://twitter.com/__4lph4__) + +**Short writeup** ++ Challenge involves Reversing, Web, and Crypto ++ Reverse the binary to get the endpoints ++ Trigger the XSS bug in the website and get admin cookie ++ Use Hash Length extension attack to get authenticated as admin and get the flag