Brown Badge

24 Exercises
Coming soon
Easy image for Express Local File Read

Express Local File Read

  • This exercise covers how an insecure to render can be used to gain local file read with Express
  • Completed by 0 student
  • Takes -- on average
Coming soon
Hard image for SSRF via FFMPEG II

SSRF via FFMPEG II

  • This exercise covers how you can read abitrary files when an application use ffmpeg to render videos from a video you provide
  • Completed by 0 student
  • Takes -- on average
  • Ruby/FFMpeg
Coming soon
Hard image for Ox Remote Code Execution

Ox Remote Code Execution

  • This exercise covers how you can gain code execution when an application using Ox to deserialize data and run on Ruby 2.3
  • Completed by 0 student
  • Takes -- on average
  • Ruby
Coming soon
Hard image for Ox Remote Code Execution II

Ox Remote Code Execution II

  • This exercise covers how you can gain code execution when an application using Ox to deserialize data and run on Ruby 2.7
  • Completed by 0 student
  • Takes -- on average
  • Ruby