Web Challenge Walkthroughs - PicoCTF 2022 (BEGINNER-FRIENDLY Capture The Flag)

Web challenge walkthroughs for the Pico Capture The Flag competition 2022 (picoCTF). We'll cover HTML/JS/CSS inspection, directory traversal, cookie manipulation, hidden files/directories, SQL injection (SQLi), XSS and more! We'll use burp suite, firefox devtools, postgresql and ngrok. Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #Web #CTF #CaptureTheFlag #Pico #PicoCTF #PicoCTF2022

↢Social Media↣
Twitter:   / _cryptocat  
GitHub: https://github.com/Crypto-Cat/CTF
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn:   / cryptocat  
Reddit:   / _cryptocat23  
YouTube:    / cryptocat23  
Twitch:   / cryptocat23  

↢PicoCTF↣
https://ctftime.org/event/1578/
https://play.picoctf.org/events/70/ch...
https://picoctf.org/discord
  / picoctf  

↢Resources↣
Ghidra: https://ghidra-sre.org/CheatSheet.html
Volatility: https://github.com/volatilityfoundati...
PwnTools: https://github.com/Gallopsled/pwntool...
CyberChef: https://gchq.github.io/CyberChef
DCode: https://www.dcode.fr/en
HackTricks: https://book.hacktricks.xyz/pentestin...
CTF Tools: https://github.com/apsdehal/awesome-ctf
Forensics: https://cugu.github.io/awesome-forensics
Decompile Code: https://www.decompiler.com
Run Code: https://tio.run

↢Chapters↣
Start: 0:00
On Includes: 1:02
Inspect HTML: 1:43
Local Authority: 2:00
Search Source: 2:57
Forbidden Paths: 4:00
Power Cookie: 4:45
Roboto Sans: 5:10
Secrets: 6:22
SQL Direct: 7:46
SQLiLite: 9:04
Noted: 11:09
End: 30:56