Web challenge of the annual CTF organized by the ANSSI, where PHP sessions can be used to perform a LFI.

Funny crypto challenge in which we have to crack the vulnerable AES implementation of a Python ransomware to decrypt JPG files.

Nice forensic/crypto chall about weak TLS implementation inside a PCAP file, played during the 2nd edition of the Santhacklaus CTF.

Challenge web d’exploitation d’une mXSS : bypass de DOMPurify et d’une blacklist de mots-clés.