I'm now really looking forward to work finishing for the day. The first thing I did was email all the developers at work and challenge them with a race to the finish :p ....I'm a grad halfway through my year of QA.
'; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
41–50 of 80 posts
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#42I was looking forward to verifying the P = NP proof on level 3, but sadly I don't have access to DARPA’s 1000-node testbed, nor does my phone have any optical storage space. Sigh :(
Anyway, love the challenge, the attention to detail is awesome :)
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#43Have had a lot of fun with this so far even though I'm only at level 4, kind of went off on a tangent on level 3 and after getting a partial solution I realised that there was a much easier way of approaching it
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#44Gah, I'm stuck on level 4. I've never really dealt with security in ruby / sinatra / sequel applications.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#45This is suprisingly fun. At first, you feel like a badass, reading the documentation for every function call, googling for exotic bugs. Then you feel like a total idiot when you notice how simple it actually is. Finally, you laugh at people in the IRC because you know exactly how stupid they feel.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#46My favorite part is watching the captures in real time at https://stripe-ctf.com/leaderboard .
As I (and my now partner Eevee) race towards the level 8 finish line, I don't feel quite the same. I see us making limited progress and see the number of people finishing level 7 rising, haha. This is fun, though.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#47Gah, I'm stuck on level 4. I've never really dealt with security in ruby / sinatra / sequel applications.
... Yeah, me too. If you check out the "about" page [1], there's IRC info at the bottom [2], so there may be hints there.
1: https://stripe-ctf.com/about
2: irc://irc.stripe.com:+6697/ctf
Edit: the IRC helped. the issue isn't ruby, sinatra, etc.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#48This is suprisingly fun. At first, you feel like a badass, reading the documentation for every function call, googling for exotic bugs. Then you feel like a total idiot when you notice how simple it actually is. Finally, you laugh at people in the IRC because you know exactly how stupid they feel.
Yup. Kept overthinking it. Oy.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#49Level 2 is just giving me timeouts. Joined IRC channel to report bug, and somebody gave away the answer for level 2. Bummer, I had been enjoying myself.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#50Level 3 timing out :(