Me and my amazing team got 2nd place in Connectors CTF this year and I have some web challenges to share with you

Introduction

🎯 Challenge Overview

By an impatient, caffeinated bug hunter who’s broken more things than they’d like to admit — and learned the right way to tell people…

Most security labs are built around predictable, well-documented vulnerabilities. But every once in a while, during experimentation, you…

This is how broken access control led to a 2FA authentication bypass on a popular web application. While testing I could directly access…

Introduction

A Step‑by‑Step Methodology — From Passive Recon & JavaScript Leakage to Mass Assignment, BOLA Chains, and Critical Privilege Escalation

Today, I solved a daily challenge on Bugforge, targeting a web application called Cafe Club.

Hey guys this a writeup for the all the web challenges

OBJECTIVE: To exploit a web application featuring a vulnerable search input that lacks filtering, allowing for the execution of arbitrary…

OBJECTIVE: To identify the injection point, break out of an HTML comment block, and execute arbitrary JavaScript to retrieve the challenge…

Most bug bounty sessions end the same way.

In this room, we will be guided step-by-step to do a web penetration testing to find out any vulnerabilities, and ultimately know the way…

As businesses increasingly rely on web applications for banking, shopping, education, healthcare, and communication, securing these…