/tags/path-traversal/ Recent content in path-traversal on Hugo -- gohugo.io en-us Sat, 11 Apr 2026 12:00:00 +0000 /writeups/shellfish-say/ Sat, 11 Apr 2026 12:00:00 +0000 /writeups/shellfish-say/ Shellfish Say | FCSC 2026 Challenge The new version of Shrimp Say is out! Discover Shellfish Say! To ask the bot to say something, connect with: nc challenges.fcsc.fr 2256 Note: The challenge VM has no internet access. We get the full source of a Docker stack. There is a PHP/Apache web app where a cartoon shellfish “says” a quote loaded via AJAX, and a Puppeteer bot that sets a FLAG cookie on the shellfish-say domain then visits a URL we provide.