Most web CTF challenges follow a pattern: locate input, break validation, and chain to impact. These notes keep the flow compact and actionable.
SQLi flow
- Find the sink and confirm response behavior.
- Check for stacked queries and time-based paths.
- Use minimal payloads before expanding to extraction.
XSS flow
- Identify context and encoding boundaries.
- Move from alert to data access or token exfil.
- Persist where possible for higher impact.
SSRF flow
- Probe internal metadata endpoints.
- Look for URL parsing edge cases and redirects.
- Escalate to internal services or credentials.
Next log: building a reusable payload kit with Burp and ffuf.