Cbc-R on CyberSecurity Elitehttps://cybersecurityelite.com/tags/cbc-r/Recent content in Cbc-R on CyberSecurity EliteCyberSecurity Elitehttps://cybersecurityelite.com/images/og-default.pnghttps://cybersecurityelite.com/images/og-default.pngHugoen-usThu, 09 Jul 2026 17:08:58 +0200LYKNCTF 2026 Web Writeup: 10 Challenges Solved (Padding Oracle, JWT alg:none, SSRF+SSTI, PHP .php5, SQLi RCE)https://cybersecurityelite.com/ctf-writeups/lyknctf-2026-web-writeup/Thu, 09 Jul 2026 14:15:00 +0000https://cybersecurityelite.com/ctf-writeups/lyknctf-2026-web-writeup/Step-by-step LYKNCTF 2026 web-track writeup — ten challenges covering HTTP 302 body leaks, WebSocket race, nginx case-sensitivity bypass, AES-CBC padding oracle (CBC-R), 4-digit OTP brute + SQLi RCE + SUID csvtool, client-side API key leak, Flask debug source disclosure, JWT alg:none forge, PHP short-tag .php5 RCE, and SSRF into HMAC-invite forge into Jinja2 SSTI.