1223: Smartypants Revenge

Writeup for the Intigriti December 2023 challenge 💥

Name	Authors	Category
Intigriti December Challenge (2023)	Protag	ReDoS, SSTI, RCE

Challenge Description

Find the flag and win Intigriti swag.

Useful Resources

• HackTricks: SSTI

• PHP: Regular Expression

• Checking Strings: Avoiding Catastrophic Backtracking

• Smarty Pants (unpatched version of this challenge from 1337UP CTF 2023)

Community Writeups

1. smickovskid

2. simonedimaria

3. neptunianhacks

4. 0xalexandre

5. siss3l

6. stealthcopter