$ cat writeup.md…
$ cat writeup.md…
ringzer0ctf
Task: a minimal PHP login form with no source disclosure, whose category is 'Exotic Data Storage'. Solution: bypass authentication with MongoDB-style NoSQL operator injection using PHP array bracket notation (username[$ne]=1).
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar