Web Sec Challenges
(selector fun) https://websec.prof.ninja/ctf/selectors/
(Firebase fetching, dynamic client-side URLs) https://minceraft-game.web.app/ (WARNING this updates every 60 seconds)
Day 11 Flag
(Speedrun 1: LFI)https://dtctf.herokuapp.com/
(Speedrun 2: exposed .git)https://pswd.fsg.opalstacked.com/
(Speedrun 3: Type Juggling)https://lampdemo.herokuapp.com/
(Speedrun 4: UNSERIALIZATION)Day 22 Flag
(10 flags RSA workshop): https://gist.github.com/AndyNovo/db07790dc9bd57a343de8a42d5b992ad
(S3 Misconfig) http://fall23webhost.s3-website-us-east-1.amazonaws.com/
Day 32 Flag: https://general-immediate-fish.glitch.me/stuffhere and Source code here
Day Before Break: Let's write a JWT problem