Skip to content

CTF Writeups

Power Cookie

Initializing search

CTF Writeups

Index
Arizona CTF 2025 (pwn.college)
Arizona CTF 2025 (pwn.college)
- Linux
  Linux
  - Hijack Me!
- Web Security
  Web Security
  - Cowherders 1
  - No Admin For You
BrunnerCTF 2025
BrunnerCTF 2025
- Crypto
  Crypto
  - Half-Baked
- OSINT
  OSINT
  - There Is a Lovely Land
- Pwn
  Pwn
  - Othello Villains
- Reverse Engineering
  Reverse Engineering
  - Grandma's Predictable Cookies
  - Trippi Troppa Chaos
- Shake & Bake (Beginner)
  Shake & Bake (Beginner)
- Web
  Web
  - Baking Bad
  - Brunner's Bakery
CTFLearn
CTFLearn
- Binary
  Binary
- Cryptography
  Cryptography
- Forensics
  Forensics
- Miscellaneous
  Miscellaneous
- Programming
  Programming
- Reversing
  Reversing
  - RE_verseDIS
  - PIN
  - Reykjavik
  - Riyadh
- Web
  Web
Cryptohack
Cryptohack
- Crypto on the Web
  Crypto on the Web
  - JSON Web Tokens
  - TLS Part 1: The Protocol
- Diffie Hellman
  Diffie Hellman
  - Starter
- General
  General
- RSA
  RSA
- Symmetric Ciphers
  Symmetric Ciphers
GoogleCTF Beginner's Quest 2024
GoogleCTF Beginner's Quest 2024
Hacker101 CTF
Hacker101 CTF
OverTheWire
OverTheWire
- Bandit
Pentathon25
Pentathon25
TFC CTF 2025
TFC CTF 2025
- Web
  Web
TryHackMe
TryHackMe
- Mr Robot
- OhSINT
- Pickle Rick
- Sakura
picoCTF
picoCTF
- Binary Exploitation
  Binary Exploitation
  - CVE
  - PIE TIME
  - VNE
  - buffer overflow 0
  - buffer overflow 1
  - buffer overflow 2
  - flag leak
  - format string 0
  - format string 1
  - function overwrite
  - hash-only-1
  - heap 0
  - heap 1
  - heap 2
  - heap 3
  - ropfu
  - two-sum
- Cryptography
  Cryptography
- Forensics
  Forensics
- General Skills
  General Skills
- Reverse Engineering
  Reverse Engineering
- Web Exploitation
  Web Exploitation
Pwn.college
Pwn.college
- Content Injection
  Content Injection
- Intro to Cybersecurity
  Intro to Cybersecurity
  - Binary Exploitation
    Binary Exploitation
    
    Basic Shellcode
    
    Control Hijack
    
    Hijack to (Mapped) Shellcode
    
    Hijack to Shellcode
    
    NOP Sleds
    
    NULL-free Shellcode
    
    PIEs
    
    Precision
    
    String Lengths
    
    Tricky Control Hijack
    
    Variable Control
    
    Your First Overflow
  - Intercepting Communication
    Intercepting Communication
    
    Connect
    
    Listen
    
    Monitor
    
    Scan
  - Web Security
    Web Security
    
    Authenication Bypass
    
    CMDi
    
    CSRF
    
    Path Traversal
    
    SQLi
    
    XSS
- Program Security
  Program Security
  - Dynamic Allocator Misuse
  - Return Oriented Programming
- Pwntools
  Pwntools
  - Pwntools Tutorial
- Software Exploitation
  Software Exploitation
  - Format Strings Exploit
Pwnable.kr
Pwnable.kr
- Toddler's Bottle
  Toddler's Bottle
  - bof
  - collision
  - fd
  - flag
Xss game
Xss game
- level 1
- level 2
- level 3
- level 4
- level 5
- level 6

Power Cookie¶

Logging in as guest sets a cookie isAdmin with value 0; change it to 1 and refresh

Made with Material for MkDocs