N0PS25: Writeup for Web/Plotwist

This writeup covers the solution to the “Plotwist” web challenge from N0PS CTF 2025, which involves bypassing NGINX access controls to reach a restricted API endpoint.

June 4, 2025 · 10 min · hxuu

N0PS25: Writeup for Web/CasinOps

A Flask-based web application echoing user-provided data via a CSV export feature. Vulnerable to SSTI

June 2, 2025 · 8 min · hxuu