Learn the Skills Netflix, Meta, and Capital One Actually Hire For
Finance Certifications Goldman Sachs & Amazon Teams Trust
Overview
Google, IBM & Meta Certificates — All 10,000+ Courses at 40% Off
One annual plan covers every course and certificate on Coursera. 40% off for a limited time.
Get Full Access
This video walkthrough guides you through solving three web challenges from the 2025 Tsuku CTF competition. Explore detailed solutions for "len_len" (JSON injection), "flash" (sensitive file disclosure and flawed PRNG implementation), and "YAMLwaf" (YAML injection with WAF bypass). The tutorial includes timestamps for each challenge section, making it easy to navigate to specific exploits. Access accompanying written writeups through the provided link, and join the Discord server for further questions. Perfect for cybersecurity enthusiasts looking to understand web vulnerability exploitation techniques used in competitive CTF environments.
Syllabus
0:00 Intro
0:08 len_len
2:47 flash
8:28 YAMLwaf
12:23 Conclusion
Taught by
CryptoCat