UnitedCTF 2024 - IT Portal
Don't roll your own SSH servers . . . or data storage flows.
So, I recently attended UnitedCTF 2024, and got a chance to get through some of the challenges. IT Portal involved some new ground for me, namely working with Paramiko to get data into and out of a custom TUI. I also had some thoughts on the security implications of the portal as written. Here's the writeup!
(If you’re wondering why it’s on dev.to and not here, I can basically copy paste Markdown into there — also, the code formatting is one-stop.)
If you want more writeups on CTF challenges I do, or ways to secure life aimed at developers and the everyday layperson, feel free to subscribe! It costs absolutely nothing, and it helps me know this content is helping you out.