Skip to content

v1.10.0

Choose a tag to compare

@kOaDT kOaDT released this 16 Jan 20:23

What's New

  • Hall of Fame page: Community-driven player profiles page
  • New flags: Added two new flags for security testing:
    • Product search with SQL injection vulnerability
    • Session fixation and weak session management vulnerability

Improvements

  • Weak MD5 hashing vulnerability: Updated to require chained vulnerability exploitation. The MD5 hash is no longer displayed on the /news page; it must be discovered by chaining exploits such as SQL injection
  • Replaced ROADMAP.md with GitHub project and updated related links

Maintenance / Chore

  • Removed redundant cookie-based authentication code