tag

File-Upload

4 posts

web

CachedWeb

2025-09-23

CachedWeb: chain SSRF with path control to reach the internal target and read the flag.

weblocked

2024-12-12

web

2024-11-30

PetPet Rcbee: abuse file-upload to cross the web trust boundary and recover the flag.

web

2024-11-30

Prying Eyes: use path traversal to escape the intended read path and recover the flag.