webmedium

Камень, ножницы, бумага

hackerlab

Task: a PHP web Rock-Paper-Scissors game required a 100-win streak and exposed progress through session state. Solution: abuse broken session handling where each non-tie creates a new child PHPSESSID, keep only winning branches as checkpoints, and discard losses until the streak reaches 100.

$ ls tags/ techniques/
phpsessionsrace_condition_like_logicstate_managementrock_paper_scissors
session_checkpoint_abusefavorable_state_branchingwin_streak_preservation
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub to get started.

$ssh [email protected]