CTF Wiki
Web
SQL Injection
NoSQL Injection
File Inclusion
Command Injection
XXE
XSS
CSRF
SSRF
File Upload
Deseralization
WebSockets
Other
PWN
Sandbox escapes:
Crypto
Stream Ciphers
Block Ciphers
- ECB Byte-at-a-time
- ECB cut-and-paste
- CBC Padding Oracle
- CBC Bitflipping
- CTR Fixed Nonce
- CTR Bitflipping
Hash functions
RSA
- Common Modulus
- Coppersmith's Short Pad Attack
- Partial Key Exposure Attack - Boneh, Durfee, Frankel
- Hastad Broadcast Attack
- Wienner Attack
- Homomorphic Attack
- Timing Attacks
- Fault Attacks - Boneh, DeMillo, Lipton
- Fault Attacks - Brier, Naccache, Nguyen, Tibouchi
- PKCS1 Padding Attacks