<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Gpnctf on sn00py1310's Blog</title><link>http://blog.snoopys.xyz/en/tags/gpnctf/</link><description>Recent content in Gpnctf on sn00py1310's Blog</description><generator>Hugo</generator><language>en</language><lastBuildDate>Sun, 21 Jun 2026 20:00:00 +0200</lastBuildDate><atom:link href="http://blog.snoopys.xyz/en/tags/gpnctf/index.xml" rel="self" type="application/rss+xml"/><item><title>Writeup Simple Food Notifications</title><link>http://blog.snoopys.xyz/en/posts/writeup-simple-food-notifications-ef21cc083e00/</link><pubDate>Sun, 21 Jun 2026 20:00:00 +0200</pubDate><guid>http://blog.snoopys.xyz/en/posts/writeup-simple-food-notifications-ef21cc083e00/</guid><description>&lt;p&gt;Notes: This is a writeup from the author of the challenge. The handout is &lt;a href="./simple-food-notifications.tar.gz" &gt;simple-food-notifications.tar.gz&lt;/a&gt;.&lt;/p&gt;
&lt;h2 id="short-challenge-description"&gt;
 Short challenge description
 &lt;a class="heading-link" href="#short-challenge-description"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;Users can simulate ordering food on the website and receive a notification on a provided callback URL. The goal of the challenge is to request &lt;code&gt;/vip-meal&lt;/code&gt; from the IP &lt;code&gt;127.0.0.1&lt;/code&gt;.&lt;/p&gt;
&lt;h2 id="challenge-description"&gt;
 Challenge description
 &lt;a class="heading-link" href="#challenge-description"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;The challenge simulates a website where users can order food and receive notifications once it&amp;rsquo;s ready.
The ordering logic has a simple rate limiting mechanism and starts a new thread for each order.&lt;/p&gt;</description></item><item><title>Writeup Painting Dice</title><link>http://blog.snoopys.xyz/en/posts/writeup-painting-dice-098527d17a3c/</link><pubDate>Sun, 22 Jun 2025 00:00:00 +0200</pubDate><guid>http://blog.snoopys.xyz/en/posts/writeup-painting-dice-098527d17a3c/</guid><description>&lt;p&gt;Notes: This is a writeup from the author of the challenge. The handout is &lt;a href="./painting-dice.tar.gz" &gt;painting-dice.tar.gz&lt;/a&gt;.&lt;/p&gt;
&lt;h2 id="short-challenge-description"&gt;
 Short challenge description
 &lt;a class="heading-link" href="#short-challenge-description"&gt;
 &lt;i class="fa-solid fa-link" aria-hidden="true" title="Link to heading"&gt;&lt;/i&gt;
 &lt;span class="sr-only"&gt;Link to heading&lt;/span&gt;
 &lt;/a&gt;
&lt;/h2&gt;
&lt;p&gt;User can update a profile with HTML and CSS. Javascript execution is not possible because of a Strong CSP. User can requests a review from the admin bot, which then sends them a screenshot from their profile. To get the flag the user needs to be upgraded.&lt;/p&gt;</description></item></channel></rss>