D
dũng3109
@dũng3109
Global rank
#8
All-time leaderboard
Career points
7,200
From closed CTFs
Challenges scored in
3
At least one flag
Captures solved
19
Correct flags
Activity
Submission rhythm.
Monthly captures
Monthly Captures
Submissions
Public captures.
Captures19 captures
- Northline Pages: A Draft Went LiveWhat reference is held by the preview worker reached through template execution?0 ptsNot awarded
- Northline Pages: A Draft Went LiveWhat object-version reference appears when the target preview uses the modified template?0 ptsNot awarded
- Northline Pages: A Draft Went LiveWhat reference is recorded for the unauthorized addition to the target project's team?0 ptsNot awarded
- NimbusStack Incident: The Poisoned PipelineProve you understood the full chain. Then close the incident.450 ptsCompleted
- NimbusStack Incident: The Poisoned PipelineA signature is only as strong as what it covers.450 ptsCompleted
- NimbusStack Incident: The Poisoned PipelineRead the rules carefully. Then use them against the system.450 ptsCompleted
- NimbusStack Incident: The Poisoned PipelineNot everything stored as config should be treated as safe.450 ptsCompleted
- NimbusStack Incident: The Poisoned PipelineEvery platform has an entry point. Find it450 ptsCompleted
- NexaCorp: Zero CredentialsYou walk through a door using an identity you forged450 ptsCompleted
- NexaCorp: Zero CredentialsThe server fetches something internal on your behalf450 ptsCompleted
- NexaCorp: Zero CredentialsYou gave yourself access the system never intended to grant450 ptsCompleted
- NexaCorp: Zero CredentialsA credential meant for someone else ends up in your hands450 ptsCompleted
- NexaCorp: Zero CredentialsSomething was left exposed that shouldn't be public450 ptsCompleted
- VulnCorpWhat is the flag from the secrets vault accessed by exploiting the fail-open authentication bypass?450 ptsCompleted
- VulnCorpWhat is the flag returned by the exfiltration callback endpoint of the backdoored supply chain package?450 ptsCompleted
- VulnCorpWhat is the flag extracted from the AI assistant's internal configuration through prompt injection?450 ptsCompleted
- VulnCorpWhat is the flag retrieved from the internal cloud metadata service accessed via Server-Side Request Forgery?450 ptsCompleted
- VulnCorpWhat is the flag received after verifying the admin credentials obtained through SQL injection and password hash cracking?450 ptsCompleted
- VulnCorpWhat is the flag obtained from the debug admin panel accessed through secrets leaked in the exposed git commit history?450 ptsCompleted