> SunshineCTF 2026

A cookie jar overflow evicts the Inspector's role cookie and grants chief access.

Gopher SSRF reaches an internal PDF renderer and reads the flag through file URLs.

Blind PostgreSQL SQL injection reaches command execution through COPY TO PROGRAM.

GraphQL introspection exposes an unauthenticated vendor key and an internal 100% discount.

JWT key selection via a path-traversal kid reads a static file and forges an editor token.