nataliely
1st place
21350 points
Awards
Hint 9
hints
Hint for Location Info
0
Hint 23
hints
Hint for Admin Section
-25
Hint 67
hints
Hint for Privacy Policy
-10
Hint 84
hints
Hint for Allowlist Bypass
-70
Hint 64
hints
Hint for Outdated Allowlist
-10
Solves
| Challenge | Category | Value | Time |
| Upload Type | Improper Input Validation | 450 | |
| Upload Size | Improper Input Validation | 450 | |
| Payback Time | Improper Input Validation | 450 | |
| Admin Registration | Improper Input Validation | 450 | |
| Missing Encoding | Improper Input Validation | 100 | |
| Zero Stars | Improper Input Validation | 100 | |
| Frontend Typosquatting | Vulnerable Components | 1000 | |
| Blockchain Hype | Security through Obscurity | 1000 | |
| Privacy Policy Inspection | Security through Obscurity | 450 | |
| Login Support Team | Security Misconfiguration | 1350 | |
| Privacy Policy | Miscellaneous | 100 | |
| Security Policy | Miscellaneous | 250 | |
| Bully Chatbot | Miscellaneous | 100 | |
| Nested Easter Egg | Cryptographic Issues | 700 | |
| Forged Coupon | Cryptographic Issues | 1350 | |
| Bonus Payload | XSS | 100 | |
| DOM XSS | XSS | 100 | |
| Kill Chatbot | Vulnerable Components | 1000 | |
| Unsigned JWT | Vulnerable Components | 1000 | |
| Expired Coupon | Improper Input Validation | 700 | |
| Repetitive Registration | Improper Input Validation | 100 | |
| Extra Language | Broken Anti Automation | 1000 | |
| CAPTCHA Bypass | Broken Anti Automation | 450 | |
| Question 056 | Questions | 20 | |
| Question 055 | Questions | 20 | |
| Question 054 | Questions | 20 | |
| Question 053 | Questions | 20 | |
| Question 052 | Questions | 20 | |
| Question 051 | Questions | 20 | |
| Question 050 | Questions | 20 | |
| Question 049 | Questions | 20 | |
| Question 048 | Questions | 20 | |
| Question 047 | Questions | 20 | |
| Question 045 | Questions | 20 | |
| Question 044 | Questions | 20 | |
| Question 043 | Questions | 20 | |
| Question 042 | Questions | 20 | |
| Question 041 | Questions | 20 | |
| Question 039 | Questions | 20 | |
| Question 038 | Questions | 20 | |
| Question 037 | Questions | 20 | |
| Question 036 | Questions | 20 | |
| Question 035 | Questions | 20 | |
| Question 034 | Questions | 20 | |
| Question 033 | Questions | 20 | |
| Question 032 | Questions | 20 | |
| Question 031 | Questions | 20 | |
| Question 030 | Questions | 20 | |
| Question 028 | Questions | 20 | |
| Question 027 | Questions | 20 | |
| Question 026 | Questions | 20 | |
| Question 024 | Questions | 20 | |
| Question 023 | Questions | 20 | |
| Question 022 | Questions | 20 | |
| Question 021 | Questions | 20 | |
| Question 020 | Questions | 20 | |
| Question 019 | Questions | 20 | |
| Question 018 | Questions | 20 | |
| Question 017 | Questions | 20 | |
| Question 016 | Questions | 20 | |
| Question 015 | Questions | 20 | |
| Question 013 | Questions | 20 | |
| Question 011 | Questions | 20 | |
| Question 010 | Questions | 20 | |
| Question 009 | Questions | 20 | |
| Question 008 | Questions | 20 | |
| Question 007 | Questions | 20 | |
| Question 006 | Questions | 20 | |
| Question 005 | Questions | 20 | |
| Question 004 | Questions | 20 | |
| Question 003 | Questions | 20 | |
| Forged Review | Broken Access Control | 450 | |
| Manipulate Basket | Broken Access Control | 450 | |
| Score Board | Miscellaneous | 100 | |
| Forged Feedback | Broken Access Control | 450 | |
| View Basket | Broken Access Control | 250 | |
| Five-Star Feedback | Broken Access Control | 250 | |
| Admin Section | Broken Access Control | 250 | |
| Login Admin | Injection | 250 | |
| Two Factor Authentication | Broken Authentication | 1000 | |
| User Credentials | Injection | 700 | |
| Change Bender's Password | Broken Authentication | 1000 | |
| Question 002 | Questions | 20 | |
| Question 001 | Questions | 20 | |
| Error Handling | Security Misconfiguration | 100 | |
| Login Bjoern | Broken Authentication | 700 | |
| GDPR Data Erasure | Broken Authentication | 450 | |
| Bjoern's Favorite Pet | Broken Authentication | 450 | |
| Password Strength | Broken Authentication | 250 | |
| GenAI Challenge 03 | Generative AI | 50 | |
| GenAI Challenge 02 | Generative AI | 40 | |
| GenAI Challenge 01 | Generative AI | 20 | |
| Unlock Individual Challenges | Unlock | 5 | |
| Data Classification Prerequisites | Essentials - Data Classification | 20 | |
| Secret Management Question 4 | Essentials - Secret Management | 80 | |
| Security Standards Scenario 4 | Essentials - Security Standards | 80 | |
| Security Bugs Scenario 6 - Bonus | Essentials - Security Bugs | 80 | |
| Security Bugs Scenario 2 | Essentials - Security Bugs | 80 | |
| Security Standards Prerequisites | Essentials - Security Standards | 20 | |
| Security Bugs Prerequisites | Essentials - Security Bugs | 20 | |
| Data Classification Scenario 2 | Essentials - Data Classification | 80 | |
| Secret Management Prerequisites | Essentials - Secret Management | 20 | |
| Scenario 3 - Mitigating Risk During Feature Planning | Essentials - Quality | 20 |