Scripting Miscellaneous Filter Bypass
+300 points

Build yourself in

The extraterrestrials have upgraded their authentication system and now only them are able to pass. Did you manage to learn their language well enough in order to bypass the the authorization check?

Web LFI RCE
+300 points

Extortion

Use a Local File Inclusion vulnerability in PHP to get Remote Code Execution by poisoning the session cookie

Web Scripting
+300 points

E.Tree

Using Boolean XPATH Injection to slowly exfiltrate hidden data