Brotli live streamed CTF; pop an RCE get $1k BTC

I wanted to figure out just how exploitable http2shell was in practice, so I've created https://brotli2bitcoin.com with a standard production config -- pop an RCE and find the flag to claim the $1K BTC.

And to make it interesting, I setup a live stream showing every single attack attempt happening live https://youtube.com/live/nr7Ieqb1J-E

Have fun!

P.S. I know it's "trust me bro" but this is not a honeypot -- just a hiring strategy for my company

submitted by /u/eth0izzle
[link] [comments]

from hacking: security in practice https://ift.tt/lWgjGMO

Comments