HackNow

ShopNow | HackNow

All CTF challenges

EasyWeb Exploitation

ShopNow

7 Mar 2026

Points

+100

Statistics

12

Solutions

100

Points

AuthorNeo Yamaguchi

First Blood

zen0x

8 Mar 2026

Description

lock UZ only

Web Lab

Launch the lab to solve this challenge. The virtual environment stays active for 1 hour.

Stages

0/8

1

Information Disclosure (Robots.txt)

+10 points

Solve the previous stage first

2

Debug Endpoint Exposure

+10 pointsPrevious stage required

Solve the previous stage first

3

IDOR

+10 pointsPrevious stage required

Solve the previous stage first

4

JWT Secret in Redis Cache

+10 pointsPrevious stage required

Solve the previous stage first

5

JWT Forgery - Admin Access

+10 pointsPrevious stage required

Solve the previous stage first

6

SQL Injection (UNION-based)

+10 pointsPrevious stage required

Solve the previous stage first

7

File Upload Bypass

+10 pointsPrevious stage required

Solve the previous stage first

8

### Flag 9: SSTI (Server-Side Template Injection)

+15 pointsPrevious stage required

Solve the previous stage first

Rating

Report to author