Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

GraphQL Week on The Hacker101 Capture the Flag Challenges

hackerone.com | blog | #ctf | #api-security | #graphql | #training | #hackerone | #hacker101

Summary

HackerOne released three GraphQL-based Hacker101 CTF challenges built around a bug tracker called BugDB, teaching queries, mutations and file handling to help hunters find real GraphQL security mistakes.
Published
Collected

original ↗

Related coverage

  1. Hacking GraphQL endpoints with introspection, query, mutation, batching attacks (yeswehack.com)
  2. New Blockchain security challenges: HackenProof and HackTheBox partnership (hackenproof.com)
  3. New Blockchain Security Track on Hack The Box in Collaboration with HackenProof! (hackenproof.com)
  4. The Red Agent POV: Exploiting Broken Object-Level Authorization in an Airline GraphQL API (wiz.io)
  5. The Ultimate Cloud Security Championship | 12 Months × 12 Challenges (wiz.io)
  6. Introducing The Cloud Hunting Games CTF: Test Your Cloud Incident Response Skills (wiz.io)

back