Websocket SQLi and Weak JWT Signing Key - "Bug Report Repo" [INTIGRITI 1337UP LIVE CTF 2023]

[@_CryptoCat]

4:20 I meant the other way round xD this challenge used SQLite instead of MySQL!

[@chample1]

Thanks for idea of brute forcing signature key, that's helped me

[@_CryptoCat]

Perfect! Welcome 💜

[@__-tc3sr]

Awesome challenge :O

[@_CryptoCat]

ty 💜

[@piratica-zq5my]

Great video bro 😊

[@_CryptoCat]

Thanks mate 🥰

[@ragnarlothbrok367]

Dope shit, homie

[@_CryptoCat]

👊

[@pandorian7]

holy shit amazing that bool char retrival thing. this that a standerd technique in ctfs or something we need to brainstroam

[@_CryptoCat]

Boolean/error/time-based SQLi is common, but I haven't seen many challenges that do it over websocket!

[@BabeRyHellCat]

Thank you for the video. However, I would like to see more videos that include all of the categories listed above. XD

[@_CryptoCat]

I'm gonna make some more, any challs in particular?

[@BabeRyHellCat]

@@_CryptoCat I have done all the challenges in the warm-up category. But in other categories of the challenge, I can't solve even one. Because I have just started CTF for 4 months. I watched all your walk-through videos to learn.

[@_CryptoCat]

@@BabeRyHellCat No problem! I'm gonna try and release a video per day (alternating on my channel and intigriti's) for at least the next week, maybe longer if they are getting a good reception 😊

[@BabeRyHellCat]

@@_CryptoCat thank you so much❤️

[@xab5862]

as a beginner i found this challenge hella hard , any tips to improve on this category of challenges?

[@_CryptoCat]

It's a very niche topic and definitely takes some time, I made an "intro to pwn" series which might help: kzbin.info/www/bejne/rZKWpICJmbGsftk

[@hssain.aitkadir]

Actually, you don't need to use middleware sqlmap supports web sockets, great writeup tho

[@_CryptoCat]

Oh wow, really.. Did you solve this one with SQLMap, without the middleware? Don't think it worked for me 🤔

[@entertainment_in_blood]

where can i find this challenge because the CTF is ended right? so have you uploaded this ctf anywhere?

[@_CryptoCat]

Should still be up: ctf.intigriti.io/challenges