This machine starts out with a website that allows the user to convert QR codes to text or vice-verse. The website also contains a link to download the source code. Foothold Debug downloaded app E...

Web - findme View the request through Burp picoCTF{proxies_all_the_way_be716d8e} Web - More SQL Use burp for this one, otherwise you miss the flag. In the login request use `x’ OR 1=1 –’ to do an ...

Web - Trapped View page source <script> window.CONFIG = window.CONFIG || { buildNumber: "v20190816", debug: false, modelName: "Valencia", correctPin: "8291", } </script&g...