A
PTITCTF Quals 2026
Approve Please, Genie!
CSS injection and browser side-channel exfiltration leak the flag from the approval bot.
Read
Tag: PTITCTF (7 posts)
B
PTITCTF Quals 2026
Brain Rot
Vite CVE-2025-30208 bypasses the dev server allow list and exposes arbitrary files through /@fs/.
Read
Đ
PTITCTF Quals 2026
Độ Mixi
DOM Clobbering bypasses the sanitizer and enables file-name disclosure followed by flag read.
Read
L
PTITCTF Quals 2026
LEMON MELON COOKIE
Client-side privilege escalation and SQL injection lead to the administrator account and flag.
Read
M
PTITCTF Quals 2026
Machine Love
Double URL encoding bypasses an absolute-path filter and enables local file read.
Read
P
PTITCTF Quals 2026
Palworld Mod
Path traversal in the mod build flow writes a Python codec payload and reaches server-side code execution.
Read
P
PTITCTF Quals 2026
PTIT Portfolio Renderer
Jinja2 SSTI bypasses a blacklist, reaches RCE, and reads the challenge flag.
Read