Pwning CTF infra for fun and CTF points
The bug
Last weekend, I took part in Unbreakable Solo and scored 1st place, during which I even found a bug in the infrastructure.
The cool thing I found was that in multiple choice
challenges, there was a parameter pollution bug present.
This basically allowed you to solve any multiple choice
challenge instantly without knowing the answer by just sending all of the answers in an array. For example
Kudos to the cyberedu dev team for their fast response and the quick patch. It’s nice to see people who care.