Thomas Bell
3rd place
230 points
Awards
Hint 17
hints
Hint for False Positives
-5
Solves
| Challenge | Category | Value | Time |
| False Positives | WAF and Threat Intelligence | 10 | |
| Shadow API | Flags | 15 | |
| API BxLA (2) | API BxLA (Authorization) | 15 | |
| API BxLA (1) | API BxLA (Authorization) | 10 | |
| API Drift | Flags | 25 | |
| Security Posture: Authentication | Flags | 20 | |
| Public Sensitive Data Exposure | Flags | 15 | |
| Top Attacker | Flags | 15 | |
| Malicious User | Flags | 15 | |
| Global Security | Flags | 10 | |
| Unsecure App | Flags | 10 | |
| Base64 | Simple Quizzes | 5 | |
| Fingerprint user | Simple Quizzes | 5 | |
| Unrestricted Resource Consumption | Flags | 15 | |
| Too many requests | Simple Quizzes | 5 | |
| Understanding Inventory | Simple Quizzes | 5 | |
| Server-Side Code Injection (3) | WAF and Threat Intelligence | 10 | |
| Server-Side Code Injection (2) | WAF and Threat Intelligence | 10 | |
| Server-Side Code Injection (1) | WAF and Threat Intelligence | 10 | |
| SQL Injection | WAF and Threat Intelligence | 5 | |
| This CTF is brought to you by | Welcome Flag - Give Away | 5 |