Skip to content

Commit

Permalink
[GitHub Action] Update challenges in README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
actions-user committed Apr 30, 2024
1 parent 4d4d5a6 commit 0f60d8f
Show file tree
Hide file tree
Showing 2 changed files with 23 additions and 2 deletions.
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -79,6 +79,7 @@ Although some of the challenges may run as is, it is recommended that you have d
| [Arcane Nebula](./web/arcane-nebula) | koks |
| [Cross Checked Report](./web/cross-checked-report) | YetAnotherAlt123 |
| [Microbuns](./web/microbuns) | koks |
| [ShodanQL](./web/shodanql) | sAINT_barber |
| [Underground Watch - Part 1](./web/underground_watch_part_1) | sAINT_barber |
| [Warriors Tech Shop](./web/warriors_tech_shop) | sAINT_barber |

Expand Down
24 changes: 22 additions & 2 deletions web/shodanql/README.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,27 @@
# ShodanQL

JWT forging with JKU header injection
[![Try in PWD](https://raw.githubusercontent.com/play-with-docker/stacks/master/assets/images/button.png)](https://labs.play-with-docker.com/?stack=https://raw.githubusercontent.com/cybermouflons/CCSC-CTF-2023/master/web/shodanql/docker-compose.yml)


DNS rebinding to bypass a localhost filter
**Category**: web

**Author**: sAINT_barber

## Description

We found this website that seems to list all systems OrionTech as owned.
Can you access the admin page and take the site down for good?



## Run locally

Launch challenge:
```
curl -sSL https://raw.githubusercontent.com/cybermouflons/CCSC-CTF-2023/master/web/shodanql/docker-compose.yml | docker compose -f - up -d
```

Shutdown challenge:
```
curl -sSL https://raw.githubusercontent.com/cybermouflons/CCSC-CTF-2023/master/web/shodanql/docker-compose.yml | docker compose -f - down
```

0 comments on commit 0f60d8f

Please sign in to comment.