sn0x

What is the flag from the secrets vault accessed by exploiting the fail-open authentication bypass?

What is the flag returned by the exfiltration callback endpoint of the backdoored supply chain package?

What is the flag extracted from the AI assistant's internal configuration through prompt injection?

What is the flag retrieved from the internal cloud metadata service accessed via Server-Side Request Forgery?

What is the flag received after verifying the admin credentials obtained through SQL injection and password hash cracking?

What is the flag obtained from the debug admin panel accessed through secrets leaked in the exposed git commit history?

After successfully escalating privileges on the target, you read /root/flag.txt. Which flag is the final (root) flag?

A hidden host is running a misconfigured service, after exploiting it and gaining access, what is the flag?

While exploring ctf2.playground.ine, you examine the application folder. Which flag is found there?

You've gained access to the host ctf.playground.ine. What is the first flag you discover on that machine?