My favorite part is watching the captures in real time at https://stripe-ctf.com/leaderboard .
Looks like someone has found the egg.
is that a "Ready Player One" reference?
'; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
51–60 of 80 posts
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#52Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#53I can't wait until the very last challenge just says: "SURPRISE, you typed in your password when you started this event, which is the most common way that someone's password will get stolen."
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#54Seriously love this ctf, the style and everything is quality. Hope I have some more time tomorrow to slash away at it. THANKS STRIPE!
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#55I finished first three levels. I will continue with the rest tomorrow.
I think if they didn't provide code, it would have been really difficult. Is everyone feeling same way?
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#56Gah, I'm stuck on level 4. I've never really dealt with security in ruby / sinatra / sequel applications.
... Yeah, me too. If you check out the "about" page [1], there's IRC info at the bottom [2], so there may be hints there. 1: https://stripe-ctf.com/about 2: irc://irc.stripe.com:+6697/ctf Edit: the IRC helped. the issue isn't ruby, sinatra, etc.
I was stumped by disbelief. Well, now I know that Stripe isn't lazy.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#57Gah, I'm stuck on level 4. I've never really dealt with security in ruby / sinatra / sequel applications.
On level 7 now. Man this is fun.
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#58extremely awesome. just what i like
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#59Don't know if I'll have time (or the skills) to finish Level 8 (it looks pretty intense), but the other levels were a lot of fun. This was done really well - thanks for doing it!
Re: '; CREATE TABLE `Capture the Flag`;' -- Stripe's Web Security CTF is Live
#60This is suprisingly fun. At first, you feel like a badass, reading the documentation for every function call, googling for exotic bugs. Then you feel like a total idiot when you notice how simple it actually is. Finally, you laugh at people in the IRC because you know exactly how stupid they feel.
The most frustrating thing was knowing exactly what the exploit was, but not quite getting how to take advantage of it.