-
Still Broken: Re-assessing codetyper.in After Patches
A live re-assessment of codetyper.in after the vendor claimed patches. The admin IDOR was fixed, but almost everything else wasn't. New mass-assignment bugs, an anti-cheat bypass via the public bundle formula, and a demonstrated path to #1 on the Python leaderboard in about 3 minutes.
-
From Regular User to Super Admin: Hacking codetyper.in
A writeup on how I went from curious visitor to full admin access on codetyper.in by exploiting misconfigured RLS policies and an IDOR vulnerability, all starting from a single JS bundle.