skip to content

Writeups

2023 HackTheBox University CTF: Brains & Bytes 3 writeups

filter archive
crypto

mayday-mayday

Advanced RSA attack exploiting MSB leaks from CRT exponents. Uses the Coppersmith method and lattice-based reduction to factor large moduli.

by r98inver 3 min
web

GateCrash

Deep dive into Nim-specific CRLF injection (CVE-2020-15693). Shows how to inject JSON payloads into headers to bypass frontend filters and achieve SQL injection.

by gianlu33 7 min
web

PhantomFeed

Multi-stage web exploitation involving a ReDoS-powered race condition, OAuth2-based XSS for token theft, and a final RCE via HTML2PDF font abuse.

by tomvg 6 min