This is an explanation of the Web Exploitation challenge "logon" from the CyLab Security Academy (formerly picoCTF). There is just a single factory login screen. Even though you can log in by entering ...

Build a Python bot that reads Apex Legends patch notes and pings Discord the moment the Season 30 Marked tier list shifts. 12 steps, full code.

CSRF is an attack in which another website tricks a user's browser into sending an unwanted request to a site where the user is logged in. csrf-kit adds a session-bound token to legitimate requests ...

A Wordle-style web game written in Python (Flask + SQLite). Players register, log in and try to guess a hidden 5-letter word in at most 5 guesses. Admins log in to see a daily report.

CyLab Security Academy（旧picoCTF）の Web Exploitation 問題「logon」の解説です。工場のログイン画面が1つあるだけ。ユーザー名とパスワードを入れるとログインは通るのに、肝心のフラグは「No flag for ...