From ec0b7d1bef2476abc89cf59dd7d4f3949c69da38 Mon Sep 17 00:00:00 2001
From: z3kxTa <lazektser@gmail.com>
Date: Thu, 11 Oct 2018 16:08:59 +1100
Subject: [PATCH 1/3] Update README.md

added scoreboard
---
 README.md | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/README.md b/README.md
index edcada4..742a24e 100644
--- a/README.md
+++ b/README.md
@@ -1,3 +1,5 @@
 # CySCA 2018
 
 A collection of notes and solutions for CySCA 2018 from team UTS and [UTS Cyber Security Society](http://facebook.com/utscsec). This project encourages all pull requests. 
+
+[CySCA18 Scoreboard](https://www.cyberchallenge.com.au/2018/scoreboard/index.html)

From 90005381b9d4735d0e90b9b74f34df7f0254a7ff Mon Sep 17 00:00:00 2001
From: z3kxTa <lazektser@gmail.com>
Date: Thu, 11 Oct 2018 16:10:59 +1100
Subject: [PATCH 2/3] Create double_agent[36pts].md

---
 web-app-pentest/double_agent[36pts].md | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 web-app-pentest/double_agent[36pts].md

diff --git a/web-app-pentest/double_agent[36pts].md b/web-app-pentest/double_agent[36pts].md
new file mode 100644
index 0000000..a64991e
--- /dev/null
+++ b/web-app-pentest/double_agent[36pts].md
@@ -0,0 +1,10 @@
+## Double Agent [36 pts]
+> On the Internet, nobody knows you're a dog.
+
+### Write-up
+
+- challenge name insinuates that you have to impersonate someone, or something;
+- reading through the chat with John reveals that you can only view certain sections of the website with the browser `BOBDev` that isn’t version `1.3`;
+- this hint is emphasised by visiting `/config` where is displays the error that the page “is incompatible with your browser”;
+- configure your `user-agent` and manually verbose the browser `BOBDev/1.4`;
+- profit

From 32b9c926bdf9e6c295b2b847bb06111296bcc46c Mon Sep 17 00:00:00 2001
From: z3kxTa <lazektser@gmail.com>
Date: Thu, 11 Oct 2018 16:15:54 +1100
Subject: [PATCH 3/3] Update keep_it_secret[244pts].md

updated code
---
 web-app-pentest/keep_it_secret[244pts].md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web-app-pentest/keep_it_secret[244pts].md b/web-app-pentest/keep_it_secret[244pts].md
index 8f17227..bb20547 100644
--- a/web-app-pentest/keep_it_secret[244pts].md
+++ b/web-app-pentest/keep_it_secret[244pts].md
@@ -15,4 +15,4 @@
 
 config gives you:
 
-    ```debug = <Config {'JSONIFY_PRETTYPRINT_REGULAR': False, 'SERVER_NAME': None, 'JSON_AS_ASCII': True, 'SESSION_REFRESH_EACH_REQUEST': True, 'SESSION_COOKIE_PATH': None, 'ENV': 'production', 'SECRET_KEY': 'secret', 'MAX_CONTENT_LENGTH': None, 'SESSION_COOKIE_DOMAIN': False, 'PREFERRED_URL_SCHEME': 'http', 'USE_X_SENDFILE': False, 'TRAP_HTTP_EXCEPTIONS': False, 'SESSION_COOKIE_NAME': 'session', 'BASE_DIR': '/opt/cysca-web', 'DEBUG': True, 'PROPAGATE_EXCEPTIONS': None, 'SQLALCHEMY_DATABASE_URI': 'sqlite:////opt/cysca-web/app.db', 'SESSION_COOKIE_SECURE': False, 'PRESERVE_CONTEXT_ON_EXCEPTION': None, 'SESSION_COOKIE_HTTPONLY': True, 'CSRF_SESSION_KEY': 'secret', 'TRAP_BAD_REQUEST_ERRORS': None, 'EXPLAIN_TEMPLATE_LOADING': False, 'APPLICATION_ROOT': '/', 'JSONIFY_MIMETYPE': 'application/json', 'THREADS_PER_PAGE': 2, 'PERMANENT_SESSION_LIFETIME': datetime.timedelta(31), 'TESTING': False, 'SESSION_COOKIE_SAMESITE': None, 'DATABASE_CONNECT_OPTIONS': {}, 'JSON_SORT_KEYS': True, 'CSRF_ENABLED': True, 'TEMPLATES_AUTO_RELOAD': None, 'SEND_FILE_MAX_AGE_DEFAULT': datetime.timedelta(0, 43200), 'MAX_COOKIE_SIZE': 4093}>```
+`debug = <Config {'JSONIFY_PRETTYPRINT_REGULAR': False, 'SERVER_NAME': None, 'JSON_AS_ASCII': True, 'SESSION_REFRESH_EACH_REQUEST': True, 'SESSION_COOKIE_PATH': None, 'ENV': 'production', 'SECRET_KEY': 'secret', 'MAX_CONTENT_LENGTH': None, 'SESSION_COOKIE_DOMAIN': False, 'PREFERRED_URL_SCHEME': 'http', 'USE_X_SENDFILE': False, 'TRAP_HTTP_EXCEPTIONS': False, 'SESSION_COOKIE_NAME': 'session', 'BASE_DIR': '/opt/cysca-web', 'DEBUG': True, 'PROPAGATE_EXCEPTIONS': None, 'SQLALCHEMY_DATABASE_URI': 'sqlite:////opt/cysca-web/app.db', 'SESSION_COOKIE_SECURE': False, 'PRESERVE_CONTEXT_ON_EXCEPTION': None, 'SESSION_COOKIE_HTTPONLY': True, 'CSRF_SESSION_KEY': 'secret', 'TRAP_BAD_REQUEST_ERRORS': None, 'EXPLAIN_TEMPLATE_LOADING': False, 'APPLICATION_ROOT': '/', 'JSONIFY_MIMETYPE': 'application/json', 'THREADS_PER_PAGE': 2, 'PERMANENT_SESSION_LIFETIME': datetime.timedelta(31), 'TESTING': False, 'SESSION_COOKIE_SAMESITE': None, 'DATABASE_CONNECT_OPTIONS': {}, 'JSON_SORT_KEYS': True, 'CSRF_ENABLED': True, 'TEMPLATES_AUTO_RELOAD': None, 'SEND_FILE_MAX_AGE_DEFAULT': datetime.timedelta(0, 43200), 'MAX_COOKIE_SIZE': 4093}>`