webProhard

RelayDesk

codegate2026

Task: Go-based support ticket system with custom URL parser and admin bot. Solution: URL parsing confusion using IPv6 + fullwidth dots to bypass validation, then leak flag via 4-char fragment oracle.

playwright go admin_bot postmessage url_parsing ipv6 multi_service ticket_system

url_parsing_confusionipv6_mapped_addressfullwidth_character_bypasspostmessage_exploitationoracle_based_leakfragment_matching_oracle

$ ls tags/ techniques/

playwright go admin_bot postmessage url_parsing ipv6 multi_service ticket_system

url_parsing_confusionipv6_mapped_addressfullwidth_character_bypasspostmessage_exploitationoracle_based_leakfragment_matching_oracle

Analysis

Lorem ipsum dolor sit amet, consectetur adipiscing elit. Sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat.

$ python3 exploit.py --target 192.168.1.1 --port 8080
[*] Connecting to target...
[+] Shell obtained!

Excepteur sint occaecat cupidatat non proident, sunt in culpa qui officia deserunt mollit anim id est laborum.

Permission denied (requires tier.pro)

Sign in to access full writeups

$sign in

$ cat writeup.md…

Sign in to access full writeups

Sign in to access full writeups

Similar writeups