$ cat writeup.md…
$ cat writeup.md…
alfactf
Task: React SPA torrent tracker with search functionality. Solution: UNION-based SQL injection in PostgreSQL to extract session tokens, authentication bypass with stolen admin token, download protected torrent file, extract flag from video frames.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar