r3tro

A brief look at HTTP Parameter Pollution

I’d like to take some time to dive into how some common backend languages handle HTTP Parameter Pollution.

But first, what is parameter pollution? OWASP gives us a really complete definition:

HTTP Parameter Pollution tests the applications response to receiving multiple HTTP parameters with the same name; for example, if the parameter username is included in the GET or POST parameters twice.

SaikoCTF 2024 - Hardware Badge CTF Writeup

During this year’s EkoParty I had the chance to participate in SaikoCTF a cool CTF / Research project where I had to complete challenges while wearing a whole bunch of sensors. After completing the CTF Participants were given this Hardware Badge which, besides a fun reaction game, had some it’s own CTF.