Author: Alain Mowat

And here I was thinking everybody knew SQL injections and that this challenge wouldn’t last an hour. And yet only one team was able to complete it before the end of the contest. o_O

This challenge was definitely one of the harder web missions and based on a redefined session handler mechanism that was initially discovered in a relatively well-know Firewall brand. It is also very similar to the example you can find on PHP’s own documentation here : http://php.net/manual/en/function.session-set-save-handler.php

After 8 hours of intense hacking, pycured ended up on top in this year’s Insomni’hack contest, in front of [TechnoPandas] and Int3pids.

Insomni’hack 2013 aura lieu du 21 au 22 Mars 2013 à Palexpo à Genève.

Au niveau des nouveautés, on trouvera cette année des workshops toute la journée du Jeudi 21 précédant les conférences qui auront lieu la journée du 22 et le concours qui débutera le 22 à 18h.