.برای کسب این دستاورد باید در مجموع ۳۰,۰۰۰ دلار بانتی دریافت کرده باشید

دریافت در مجموع ۳۰,۰۰۰ دلار بانتی از سایت‌های مختلف

Got the Money V

.برای کسب این دستاورد باید در مجموع ۱۰,۰۰۰ دلار بانتی دریافت کرده باشید

دریافت در مجموع ۱۰,۰۰۰ بانتی از سایت‌های مختلف

Got the Money IV

برای کسب این دستاورد باید در مجموع ۵۰۰۰ دلار بانتی دریافت کرده باشید.

دریافت در مجموع ۵,۰۰۰ دلار بانتی از سایت‌های مختلف

Got the Money III

برای کسب این دستاورد باید در مجموع ۲۵۰۰ دلار بانتی دریافت کرده باشید.

دریافت در مجموع ۲,۵۰۰ دلار بانتی از سایت‌های مختلف

Got the Money II

برای کسب این دستاورد باید در مجموع ۱۰۰۰ دلار بانتی دریافت کرده باشید.

دریافت در مجموع ۱,۰۰۰ دلار بانتی از سایت‌های مختلف

Got the Money I

برای کسب این دستاورد باید یک آسیب‌پذیری به یک سازمان گزارش کنید و در ازا آن ۱۰۰۰ دلار بانتی دریافت کنین.

دریافت ۱۰۰۰ بانتی (یا بیشتر) برای گزارش «یک» آسیب‌پذیری

Going Forward

برای کسب این دستاورد باید یک آسیب‌پذیری به یک سازمان گزارش کنید و در ازا آن ۵۰۰۰ دلار بانتی دریافت کنین.

دریافت ۵,۰۰۰ بانتی (یا بیشتر) برای گزارش «یک» آسیب‌پذیری

I'm a Striker

برای کسب این دستاورد باید یک آسیب‌پذیری به یه شرکت گزارش بدید، شرکت آن را قبول و برطرف کند.

گزارش یک آسیب‌پذیری معتبر به یک شرکت (پولی یا غیر پولی)

Welcome to the Club

برای دریافت این دستاورد، باید در امتحان اوسپ نمره «قبولی» کسب کنین.

نفراتی که موفق به کسب نمره قبولی در امتحان اوسپ شدن

Baby OWASP

Use the provided credentials to investigate potential SSRF vulnerability.

#### Requirements
+ Server-Side Request Forgery (SSRF)
+ Skill: Analyzing Backend Request Handling

#### Objective
Two sets of credentials have been leaked:  
- `armin@gmail.com` - `5AHL1Lq4wLk5A2`  
- `mikasa@gmail.com` - `ddJS)4W5Z28V7)`  

Leverage this information to identify and exploit the SSRF vulnerability. Your goal is to access and read the invoice for the third user.

Medusa

#### Requirements
+ Programming Language: JS
+ RCE: Finding and Exploitation

#### Objective
This is a difficult challenge with no hints provided. Use external resources and research techniques to brainstorm potential exploitation methods. Your goal is to achieve remote code execution and read the `/flag` file to complete the challenge.

Gladius

#### Requirements
+ Programming Language: PHP
+ Skill: Source Code Analysis, Endpoint Discovery
+ Command Injection: Identifying Vulnerable Endpoints, Bypass Filters

#### Objective
Carefully browse the site, paying attention to the source code to identify an endpoint that passes user input into the shell. Your goal is to execute the `id` command and capture its output, then read the `/flag` file to complete the challenge.

Metronium

Examine the login process closely to discover and exploit a logical vulnerability.

#### Requirements
+ Category: Broken Authentication
+ Skill: Logical Analysis of Authentication Flows
+ Objective: Unauthorized Account Access

#### Objective
Log in to the web application and carefully observe the authentication flow. Pay close attention to any extra steps or unusual behavior. Understand the underlying logic, identify a flaw, and exploit it to log in as the user `mamad` to complete the challenge.


Easy Auth

This is a black-box challenge, and there is no source code.

#### Requirements
+ SQL Injection: Understanding backend mechanisms and bypassing sanitization filters

#### Objective
Your goal is to extract the flag from the database by exploiting a SQL injection vulnerability.

SQLi Level 8 - BlackBox 1

Use the path `/proxy/internal_website/mamad.txt` to investigate its behavior and potential for exploitation.

#### Requirements
+ Topic: Attacking Secondary Contexts in Web Applications
+ Skill: Understanding Proxy Behavior
+ Vulnerability: Path Traversal, SSRF

#### Objective
Determine if the path sends an HTTP request to an internal server. If so, manipulate the path to access forbidden locations on the internal server and retrieve the private note.

Simple SSRF

#### Requirements
+ Programming Language: PHP
+ Skill: Server-Side Analysis
+ Command Injection: Understanding Server Behavior

#### Objective
Your goal is to analyze the server-side functionality to understand how inputs are handled. Develop a command injection payload to execute shell commands on the server and retrieve the `/flag` file to complete the challenge.

SQLi Level 6 - WAF Bypass 2

Use the application's functionality to explore and bypass the applied filter.

#### Requirements
+ Server-Side Request Forgery (SSRF)
+ Skill: Filter Bypassing Techniques

#### Objective
This challenge includes a filter designed to restrict SSRF attempts. Your task is to bypass the filter and successfully access the internal endpoint at `localhost:3000/admin`.

Cobalt

Use the parameter `/?source=true` to view the source code.

#### Requirements
- Programming Language: PHP
- Skill: Source Code Auditing
- SQLi: Blind technique in boolean values

#### Objective
Your goal is to extract the flag from the database by exploiting a SQL injection vulnerability

SQLi Level 3 - Boolean Blind

Identify and exploit weaknesses in the application's checker function to bypass its restrictions.

#### Requirements
+ Server-Side Request Forgery (SSRF)
+ Skill: Understanding and Bypassing Input Validation

#### Objective
Your goal is to bypass the checker function and successfully access the `/admin` endpoint.


Server Side Request Forgery 4

#### Requirements
+ Programming Language: PHP
+ Skill: Header Analysis, Out-of-Band Data Exfiltration
+ Command Injection: Analyzing Server Backend and Exploring Alternative Paylods

#### Objective
Your goal is to understand why the Level 3 payload fails here. Set up a listener on your server and specify your IP and PORT as `http://IP:PORT` to inspect the request headers. Use these insights to deduce the command executed by the server. If direct command injection is unsuccessful, explore alternative techniques to read the `/flag` file.

Command Injection 5 - Partial 2

Server Side Request Forgery 3

Investigate the application's authentication mechanism and analyze its cryptographic implementation.

#### Requirements
+ Cryptographic Failures
+ Skill: JWT Analysis and Token Tampering

#### Objective
Register a user and log in to observe the JWT. Analyze the token and identify potential vulnerabilities. Although the `id` claim appears to be a randomly generated value, tampering with the token could grant access to the administration panel. Use basic application reconnaissance techniques to uncover the administrator's `id`. Your goal is to successfully access the `/admin` route by exploiting weaknesses in the cryptographic design.

Odin

SQLi Level 5 - WAF Bypass 1

Use the parameter `/?source=true` to view the source code.

#### Requirements
- Programming Language: PHP
- Skill: Source Code Auditing
- SQLi: Time-based technique

#### Objective
Your goal is to extract the flag from the database by exploiting a SQL injection vulnerability

SQLi Level 4 - Time Blind

Investigate the web application for misconfigurations that reveal sensitive information.

#### Requirements
+ Vulnerability Type: Security Misconfiguration
+ Skill: Triggering and Analyzing Debug Information

#### Objective
Your task is to identify and exploit a misconfiguration in the application to generate a stack trace, exposing sensitive information.

PHP CMS

Command Injection 4 - Partial 1

Server Side Request Forgery 2

#### Requirements
+ Programming Language: PHP
+ Command Injection: Bypassing Filters
+ Search on the net for payloads

#### Objective
Your goal is to achieve command injection by testing various payloads to bypass server-side filters, allowing arbitrary command execution. Use manual techniques only (no automated tools like Commix) to find a way around the restrictions and read the `/flag` file.

Command Injection 3 - Filter Bypass

#### Requirements
+ Programming Language: PHP
+ RCE: Filtering bypass

#### Objective
Your goal is to execute code on the server and read the `/flag` file by identifying a way to inject commands without breaking the context.

Remote Code Execution 3

#### Requirements
+ Programming Language: PHP
+ RCE: Context Breaking and Filename Validation Bypass

#### Objective
Your goal is to read the `/flag` file by breaking the context with specific characters, analyzing the filename validation logic, and adjusting the input to achieve code injection.

Remote Code Execution 2

Use the parameter `/?source=true` to view the source code.

#### Requirements
- Programming Language: PHP
- Skill: Source Code Auditing
- SQLi: UNION technique in integer values

#### Objective
Your goal is to extract the flag from the database by exploiting a SQL injection vulnerability

SQLi level 2 - Integer UNION

Use the parameter `/?source=true` to view the source code.

#### Requirements
- Programming Language: PHP
- Skill: Source Code Auditing
- SQLi: UNION technique in string values

#### Objective
Your goal is to extract the flag from the database by exploiting a SQL injection vulnerability

SQLi Level 1 - String UNION

#### Requirements
+ Programming Language: PHP
+ Command Injection: Command Separators, Out-of-Band Data Exfiltration

#### Objective
Your goal is to exploit the blind command injection vulnerability by using a command separator to execute commands on the server. Use an Out-of-Band (OOB) technique to retrieve command output and read the `/flag` file.


Command Injection 2 - Blind

Server Side Request Forgery 1

#### Requirements
+ Programming Language: PHP
+ Command Injection: Command Separators

#### Objective
Your goal is to exploit the command injection vulnerability by inserting a command separator to execute additional commands on the server and read the `/flag` file.

Command Injection 1

#### Requirements
+ Programming Language: PHP
+ RCE: Basic Remote Code Execution via Context Breaking

#### Objective
Your goal is to achieve PHP code execution via context breaking to read the `/flag` file.

Remote Code Execution 1

گواهینامه شرکت در کلاس هانت به مدت ۶ ماه، در این مدت مباحث و متدولوژی هانت به بچه‌ها آموزش داده شد، این گواهینامه فاقد امتحان است.

Narutow Hunters

گواهینامه قبولی در امتحان کلاس، نفرانی که این گواهینامه را دریافت دارند توانسته‌اند در امتحان اوسپ نمره قبولی را بگیرند.

OWASP Exam

The challenge, named 'Escape the Blackhole' is designed for the Narutow Hunt class's talent program. Anyone can participate in this challenge, as it serves an educational purpose as well. Participants who successfully solve all the levels of the challenge will receive instructions on how to sign up for the talent list. There will be a lottery for participants on the list to class participation. The challenge requires a basic understanding of networks, web applications, HTTP, JavaScript, programming concepts, a basic understanding of security (not steganography or forensic), effective use of search engines such as Google, and critical thinking. It is crucial to approach each level with attention to detail. Remember to closely examine the provided puzzle pieces to successfully solve each level. The challenge levels do not require brute force or fuzzing over the HTTP protocol; however, there might be offline brute force involved in some levels. Please refrain from conducting fuzzing, as it may result in a permanent IP ban. During the challenge, feel free to use Google, ChatGPT, and other online resources for assistance. The challenge will be available for 10 days until March 7th, although the deadline for the Talent program is sooner, and the details will only be revealed to those who successfully complete the challenge! Please note that the levels are not sorted from easiest to most difficult.

Escape the Blackhole

The challenge, named 'Escape the Matrix,' is designed for the OWASP Zero class Got Talent process. Anyone can participate in this challenge, as it serves an educational purpose as well. Participants who successfully solve all the levels of the challenge will receive instructions on how to sign up for the talent list. There will be a lottery for participants on the list to class participation.
The challenge requires a basic understanding of networks, web applications, HTTP, JavaScript, programming concepts, a basic understanding of security (not steganography or forensic), effective use of search engines such as Google, and critical thinking. It is crucial to approach each level with attention to detail. Remember to closely examine the provided puzzle pieces to successfully solve each level.
The challenge levels do not require brute force or fuzzing over the HTTP protocol; however, there might be offline brute force involved in some levels. Please refrain from conducting fuzzing, as it may result in a permanent IP ban. During the challenge, feel free to use Google, ChatGPT, and other online resources for assistance. The challenge will be available for 7 days until November 30th, although the deadline for the Got Talent program is sooner, and the details will only be revealed to those who successfully complete the challenge!
Please note that the levels are not sorted from easiest to most difficult :) 

Escape the Matrix

Find a way to read the `flag`, the challenge will be accessible for 3 days.

Pgnix

Can you locate the secret number and uncover the flag? If you need to send multiple HTTP requests one after the other, make sure to **send 1 request every 5 seconds**.

rAndom

A straightforward yet challenging task that will test your creativity and overall proficiency in web application.