Alex Rocha

Year: 2023


2nd place

11800 points


Solves

Challenge Category Value Time
Login Bender Injection 450
Login Jim Injection 450
Forged Feedback Broken Access Control 450
Access Log Sensitive Data Exposure 700
Vulnerable Library Vulnerable Components 700
Legacy Typosquatting Vulnerable Components 700
Nested Easter Egg Cryptographic Issues 700
Weird Crypto Cryptographic Issues 250
Misplaced Signature File Sensitive Data Exposure 700
Forgotten Developer Backup Sensitive Data Exposure 700
Forgotten Sales Backup Sensitive Data Exposure 700
Easter Egg Broken Access Control 700
Poison Null Byte Improper Input Validation 700
View Basket Broken Access Control 250
Meta Geo Stalking Sensitive Data Exposure 250
Visual Geo Stalking Sensitive Data Exposure 250
Security Policy Miscellaneous 250
Zero Stars Improper Input Validation 100
Outdated Allowlist Unvalidated Redirects 100
Missing Encoding Improper Input Validation 100
Login MC SafeSearch Sensitive Data Exposure 250
Exposed Metrics Sensitive Data Exposure 100
Five-Star Feedback Broken Access Control 250
Admin Section Broken Access Control 250
Privacy Policy Miscellaneous 100
Web3 Sandbox Broken Access Control 100
Bully Chatbot Miscellaneous 100
Login Admin Injection 250
Password Strength Broken Authentication 250
Repetitive Registration Improper Input Validation 100
Empty User Registration Improper Input Validation 250
Mass Dispel Miscellaneous 100
DOM XSS XSS 100
Bonus Payload XSS 100
Confidential Document Sensitive Data Exposure 100
Error Handling Security Misconfiguration 100
Score Board Miscellaneous 100