$ cat writeup.md…
$ cat writeup.md…
bug-makers
Task: PHP circus website with flag check using strcmp() and loose comparison (== 0). Solution: Array injection (flag[]=x) makes strcmp() return NULL, which equals 0 in loose comparison, bypassing the check and revealing the flag.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar