Root Me challenges solution, chilling time

I played CTF and also joined Root Me to dive into security challenges, testing and improving my knowledge in computer security and hacking. For educational purposes, I wrote solutions to challenges that I had solved, giving you all a chance to solve them yourselves. While they may be outdated and not fit the current challenges, I believe they could still help you at least a little bit.

The flag is hidden by *, but the guide is also detaily, not need to care about it 😅

If you find it helpful, please consider giving me a star to brighten my day, IJK bro 🥲

@nh4ttruong.me

Web Secutiry

XSS

XSS Reflected

XSS Stored 1

XSS Stored 2

XSS DOM Based Introduction

XSS DOM Based Eval

XSS DOM Based AngularJS

Javascript

HTML - disabled buttons

Javascript - Authentication 2

Javascript - Authentication

Javascript - Native code

Javascript - Obfuscation 1

Javascript - Obfuscation 2

Javascript - Obfuscation 3

Javascript - Source

SQL Injection

SQL injection - Authentication GBK

SQL injection - Authentication

SQL injection - Blind

SQL injection - error based

SQL injection - File reading

SQL injection - Insert

SQL injection - Routed

SQL injection - Time-based

SQL injection numeric

SQL injection string

SQL Truncation

SQL injection - Filter bypass

CSRF

CSRF 0 protection

CSRF token bypass

PHP

Directory Traversal

File upload - Double extensions

File upload - MIME type

HTTP - Directory indexing

Local File Inclusion - Double Encoding

Local File Inclusion - Wrappers

Local File Inclusion

PHP - assert()

PHP - Filters

PHP - register global

Remote File Inclusion

Steganography

All steganography

EXIF - Metadata

Dot and next line

Steganomobile

Twitter Secret Messages

Poem from Space

Yellow dots

WAV - Noise analysis

EXIF - Thumbnail

WAV-Spectral-analysis

APNG – Just a PNG

TXT - George and Alfred

Embedded PDF

Kitty spy

Crypto Art

PNG - Pixel Indicator Technique

PNG - Pixel Value Differencing

Forensics

Docker layer

Open My Vault

---

How about me?

Here we can catch 👉 nh4ttruong