webmedium

Fragment YAML

spbctf

Task: Payment system with YAML document generation where user input in comment field is not escaped. Solution: Inject newline to create additional YAML list element with forged sender=admin, bypassing sender validation.

$ ls tags/ techniques/
injectionpayment_bypassfragment_injectionyaml
payment_forgeryyaml_fragment_injection
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]