cat/webexplore web tools →
Web Exploitation
// 3 published field manuals
Web challenges test your ability to find and exploit vulnerabilities in web applications: SQL injection, cross-site scripting, broken authentication, server-side request forgery, and more. They are the most common category in beginner CTFs because the attack surface is familiar and the tooling is light.
› field manual articles
- 01beginner
HTTP Basics for CTF
Understand requests, responses, methods, headers, and cookies — the foundation of every web challenge.
- 02intermediate
SQL Injection
Manipulate database queries by injecting SQL through unsanitized input to bypass auth and dump data.
- 03intermediate
Cross-Site Scripting (XSS)
Inject JavaScript into pages viewed by other users to steal sessions or perform actions on their behalf.