← All posts

Posts tagged #access-control

1 post

writeup

2022 Hack The Boo: Juggling Facts

IP spoofing via X-Forwarded-For header to bypass localhost-only admin access

#htb #ctf #web
+4