GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Security Lab
  • Research Blog
  • Advisories
  • CodeQL Wall of Fame
  • Events
  • Get Involved

This view

  • Original page
  • New address

GeezerVison is showing securitylab.github.com — Capture the flag

Get Involved

Capture the Flag

Ready to hone your vulnerability hunting skills? Dive into our CodeQL CTF challenges designed to sharpen your abilities while mastering CodeQL.

Go and don’t return

Closed
Start Date
March 5, 2021
Deadline
March 31, 2021
Language
Go
Difficulty
Your mission, should you choose to accept it, is to hunt for a recently identified vulnerability in an object store. This authentication bypass vulnerability enabled attackers to perform admin API operations without knowing the admin secret key.
View challenge

A call to hacktion, a GitHub workflow CTF

Closed
Start Date
March 17, 2021
Deadline
March 17, 2021
Language
GitHub Actions
Difficulty
This CTF is a single level challenge based around GitHub Workflow best practices and an interesting vulnerability pattern that GitHub Security teams have seen out in the real world.
View challenge
Closed
CodeQL and Chill
Find a pre-auth RCE in Netflix Titus.
Language
Java
Difficulty
Closed
XSS-unsafe jQuery plugins
Find variants of jQuery plugins that expose their clients to undocumented XSS (cross-site scripting) vulnerabilities.
Language
JavaScript
Difficulty
Closed
U-Boot Challenge
Follow in the footsteps of our security research team and discover 13 vulnerabilities un U-Boot.
Language
C
Difficulty
Closed
SEGV Hunt
Find a critical buffer overflow bug in glibc.
Language
C
Difficulty
Resources
Documentation
If you want to learn more about writing CodeQL queries before getting started with these CTF challenges, take a look at these articles.
Introduction to CodeQL Get in touch
Help
If you find yourself stuck writing in the QL language or on any part of the CTF and would like some help, drop us a line.
Get in touch
To keep this community open and welcoming, please read our Code of Conduct.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.