$ cat writeup.md…
$ cat writeup.md…
ringzer0ctf
Task: PHP login form that looks like a classic SQLi/type-juggling bypass but is backed by an LDAP directory search with unsanitized input in the filter. Solution: inject a bare LDAP wildcard '*' into both username and password so the search filter matches any entry, bypassing authentication.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar