webeasy

Race Shop

web-kids20

Task: Online shop with money transfer feature. Solution: Exploit TOCTOU race condition by sending parallel transfer requests to inflate balance and purchase the flag item.

$ ls tags/ techniques/
race_condition_exploitationtoctou_attackparallel_http_requests

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]