Capture the flag - 1

For this assignment you will test your web application hacking skills. You could work in groups of 2-3 if you would like.

Each member of your group should begin by creating an account at https://ctf.hacker101.com/ctf. You then should give me an identifier that you would like to use for your group (i.e. the-tigers) as well as the email addresses of those in your group. I will then email you a group invitation for hacker101. You can then proceed to do your CTF stuff.

You need to complete the following CTF exercises:

Don’t forget to use burpsuite and sqlmap for sqlinjections. You can also use other tools. (dirb might be useful)

There are plenty of walkthroughs on the internet, but try to only use them as a last resort!

What to submit

You will create a single PDF document. Create detailed documentation as to what you did to find each flag. You should even include things that you did that were unsuccessful. Finally, take a screenshot of your web page that shows the count of flags you were able to find (make sure it shows your username at the top of the screen).

Grading

Last Updated 03/26/2021