[angryhedgehog]

Hello everyone,

Insomnia web challenge just released. App docker file works fine on a local docker, but the challenge instance gives error while reaching from internet. Im not sure if its an error or part of the challenge. Lots of app files to review too.  Lets tackle this together

[h2m0nRe-d0b1e]

obviously, something is somehow wrong/broken JWT or sql injections

[ram6]

I found that the username is vulnerable to XSS

[KillerWhale]

does anyone success pwn this by xss or jwt

[h2m0nRe-d0b1e]

exist CVE on sqli in this code

[angryhedgehog]

Source code review only.

no need to waste time on xss, sqli, jwt, or any cves.

Yeah, good luck reviewing 100000 lines of source code. Solution is make me wanna cry by the way

[macavitysworld]

hey folks, Look at this thread!!

https://raidforums.im/Thread-HTB-Web-Insomnia

[TREXNEGRO]

Good luck with the hard work!

[h2m0nRe-d0b1e]

CVE for codeigniter4 too mach, but specifically case I don't find CVE, however explain is here [https://liveoverflow.com/authentication-...re-clause/]