https://chrisandoryan.github.io/ Writeups and notes on cyber security and programming by Chrisando Ryan. 2026-10-06T00:58:18+07:00 Chrisando Ryan https://chrisandoryan.github.io/posts/Admin-Secrets/ 2020-10-31T10:33:00+07:00 2020-10-31T10:33:00+07:00

Given a website, where a person can login and register. Both are irrelevant to the challenge, so I will cut the chase. The other feature, the ‘relevant’ feature of the challenge, is a feature that allows user to write a note and even send the note to an admin (evil laugh). It isn’t hurt to think that this might be an XSS challenge, and I did that.

https://chrisandoryan.github.io/posts/What-Is-The-Deadly-Bug-Here_/ 2020-06-09T10:33:00+07:00 2020-06-09T10:33:00+07:00

Given a simple website that looks like this.

https://chrisandoryan.github.io/posts/Tornado/ 2020-06-09T10:33:00+07:00 2020-06-09T10:33:00+07:00

Given a website that seems like a file-sharing utility.

https://chrisandoryan.github.io/posts/StockMarked/ 2020-06-09T10:33:00+07:00 2020-06-09T10:33:00+07:00

Given a website that seems like a plain stock trading website.

https://chrisandoryan.github.io/posts/Memoir/ 2020-06-09T10:33:00+07:00 2020-06-09T10:33:00+07:00

Given a website where you can enter any URL, the web will visit them and display the response.

https://chrisandoryan.github.io/posts/Heist-To-The-Port/ 2020-06-09T10:33:00+07:00 2020-06-09T10:33:00+07:00

Given a plain text website that says see what you don’t. A simple GET request to the website returned 405 Method Not Allowed status, which indicates that the request method is known but not supported to access the resources.