MiniSTRyplace was a 1-star rated 'Web' challenge from the HackTheBox Cyber Apocalypse CTF. The solution was pretty simple, with a vulnerable str_replace function allowing for a simple path traversal exploit. Initially, the files for the server were supplied as part of the challenge. From a quick initial search, the index.php file stood out as being … Continue reading HTB CTF 2021 – MiniSTRyplace Writeup →