Character page II - everything I've built and am willing to show people.
2024
WEB1201 Web Fundamentals · Team of 4
A frontend-only website where users can book venues and contact event planners in Malaysia. Everything is simulated with client-side JavaScript, and the simulated authentication uses the browser Crypto API, so it needs a secure (HTTPS) context.
2024
SherpaCTF 2024 · My first CTF
A web challenge from SherpaCTF, written by vicevirus. I missed the real flag during the competition because of one small detail, then worked out the solution afterwards on a local copy. It turns an image upload into XSS using an Apache quirk with unusual file names, then makes the bot upload its own cookies, which hold the flag. The link goes to my write-up.
2020
April to June 2020
My first full-stack web project, built to learn web app development and to share quizzes with friends. I learned about authentication, AJAX requests and database management. It used SQLite, which I now recognise as a poor fit for a shared production database.