webProeasy
Сила воли (Willpower)
duckerz
Task: Click challenge requiring 600,000 clicks to get the flag. Solution: Client-side trust vulnerability — the server accepts any click count sent via POST request without validation, bypassing the need for actual clicks.
$ ls tags/ techniques/
source_code_analysisrequest_forgeryparameter_manipulation
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Sign in with GitHub to continue. No email required.
$sign in$ grep --similar
Similar writeups
- [web][Pro]Арифметика (Arithmetic)— duckerz
- [web][Pro]Web-полигон (Web Polygon)— duckerz
- [crypto][Pro]Гран-при (Grand Prix)— duckerz
- [web][Pro]90 - Самое надежное хранилище (The Most Secure Storage)— duckerz
- [web][Pro]Полет нормальный (Flight is Normal)— duckerz