TFC CTF 2023

TFC CTF 2023 Web ๐ŸŒ Baby Ducky Notes This challenge looked like a normal notes sharing site, but after a quick view to the source code, it was easy to find the way to read the flag. In fact the database.db file had a query to initialize the notes table with this code: query(con, f''' INSERT INTO posts ( user_id, title, content, hidden ) VALUES ( 1, 'Here is a ducky flag!...

August 20, 2023 ยท 12 min ยท 2449 words ยท AlBovo