<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>PicoCTF on Matin Sadeghian</title><link>https://www.andrew.cmu.edu/user/msadeghi/tags/picoctf/</link><description>Recent content in PicoCTF on Matin Sadeghian</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Sat, 22 Jul 2023 00:00:00 +0000</lastBuildDate><atom:link href="https://www.andrew.cmu.edu/user/msadeghi/tags/picoctf/index.xml" rel="self" type="application/rss+xml"/><item><title>Java Code Analysis!?! PicoCTF 2023 Web Writeup</title><link>https://www.andrew.cmu.edu/user/msadeghi/posts/java-code-analysis-picoctf-2023-web-writeup/</link><pubDate>Sat, 22 Jul 2023 00:00:00 +0000</pubDate><guid>https://www.andrew.cmu.edu/user/msadeghi/posts/java-code-analysis-picoctf-2023-web-writeup/</guid><description>&lt;h1 id="description"&gt;Description&lt;/h1&gt;&#10;&lt;p&gt;BookShelf Pico, my premium online book-reading service. I believe that my website is super secure. I challenge you to prove me wrong by reading the &amp;lsquo;Flag&amp;rsquo; book! Here are the credentials to get you started:&lt;/p&gt;&#10;&lt;p&gt;Username: &amp;ldquo;user&amp;rdquo;&lt;/p&gt;&#10;&lt;p&gt;Password: &amp;ldquo;user&amp;rdquo;&lt;/p&gt;&#10;&lt;h1 id="solution"&gt;Solution&lt;/h1&gt;&#10;&lt;p&gt;Before even looking at the source code let&amp;rsquo;s look through the website and see what we have to work with. Logging in with the provided credentials presents us with this page:&lt;/p&gt;</description></item></channel></rss>