Xib3rR4dAr

blob://example.com/3dfab3bd-a892-4448-92c3-de92d8eed2ea

<img src=x onerror=alert(1)>

Refused to execute inline event handler because it violates the following Content Security Policy directive: "script-src 'self'". Either the 'unsafe-inline' keyword, a hash ('sha256-...'), or a nonce ('nonce-...') is required to enable inline execution. Note that hashes do not apply to event handlers, style attributes and javascript: navigations unless the 'unsafe-hashes' keyword is present.

angular.min.js

Xib3rR4dAr

phash

Challenge Name: phash
Challenge Text: login source
Initial Hint: No Hint First Hint (when no one solved): Marvel characters (lowercased) Second Hint: Who was the character that fans speculated would appear in a "Marvel Show" but ultimately did not make an appearance? (Third Hint was provided after first 🩸 was obtained by me)

Provided:

Xib3rR4dAr

Conundrum

Challenge Name: Conundrum
Challenge Text: Superuser
Hint: No hint provided

URL: https://challs.aupctf.live/conundrum/

Provided:

Xib3rR4dAr

POST /xmlrpc.php HTTP/1.1
Host: example.com
Content-Length: 91
Content-Type: application/x-www-form-urlencoded

<methodCall>
<methodName>system.listMethods</methodName>

Xib3rR4dAr

# From https://github.com/PortSwigger/turbo-intruder/blob/master/resources/examples/race.py
def queueRequests(target, wordlists):
    engine = RequestEngine(endpoint=target.endpoint,
                           concurrentConnections=30,
                           requestsPerConnection=100,
                           pipeline=False
                           )

    # the 'gate' argument blocks the final byte of each request until openGate is invoked
    for i in range(30):

Xib3rR4dAr

WordPress Plugin WP Statistics >= 13.1.5 - Unauthenticated Stored Cross-Site Scripting

Tested onWordpress 5.9

Exploit Title	WordPress Plugin WP Statistics >= 13.1.5 - Unauthenticated Stored Cross-Site Scripting
Exploit Author	Muhammad Zeeshan (Xib3rR4dAr)
Date	February 13, 2022
Plugin Link	WP-Statistics
Plugin Active Installations	600,000+
Version	13.1.5 (Latest)

Xib3rR4dAr

WordPress Plugin WP Statistics >= 13.1.5 - Unauthenticated Stored Cross-Site Scripting

Tested onWordpress 5.9

Exploit Title	WordPress Plugin WP Statistics >= 13.1.5 - Unauthenticated Stored Cross-Site Scripting
Exploit Author	Muhammad Zeeshan (Xib3rR4dAr)
Date	February 13, 2022
Plugin Link	WP-Statistics
Plugin Active Installations	600,000+
Version	13.1.5 (Latest)

Xib3rR4dAr

WordPress Plugin WP Statistics >= 13.1.5 - Unauthenticated Stored Cross-Site Scripting

Tested onWordpress 5.9

Exploit Title	WordPress Plugin WP Statistics >= 13.1.5 - Unauthenticated Stored Cross-Site Scripting
Exploit Author	Muhammad Zeeshan (Xib3rR4dAr)
Date	February 13, 2022
Plugin Link	WP-Statistics
Plugin Active Installations	600,000+
Version	13.1.5 (Latest)

Xib3rR4dAr

WordPress Plugin WP Statistics <= 13.1.5 - Multiple Unauthenticated SQL Injection vulnerabilities

Tested onWordpress 5.9

Exploit Title	WordPress Plugin WP Statistics <= 13.1.5 - Multiple Unauthenticated SQL Injection vulnerabilities
Exploit Author	Muhammad Zeeshan (Xib3rR4dAr)
Date	February 13, 2022
Plugin Link	WP-Statistics
Plugin Active Installations	600,000+
Version	13.1.5 (Latest)

Xib3rR4dAr

<?php

// For testing XSS is various status codes

http_response_code($_GET['rCode']); // User controlled response code

echo $_GET['payload']; // User input reflected as it is

?>