---
title: "#nullcon articles | Hashnode"
description: "Explore 2 articles tagged #nullcon on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/nullcon"
---

Tag

# #nullcon

2 posts · 0 followers

[Pradip Bhattarai](https://hashnode.com/@prdp1137) · [Sep 10, 2022](https://hashnode.com/posts/solving-assumptions-of-life-winja-ctf-nullcon-goa-2022/631cd0b7f73f4734bc0550d1)

### [Solving Assumptions of Life: Winja CTF | Nullcon Goa 2022](https://blog.pradeepbhattarai.me/solving-assumptions-of-life-winja-ctf-nullcon-goa-2022?utm_source=hashnode&utm_medium=feed)

The challenge started with the web page accepting cmd parameter with only env command input. The output of the environment included AWS\_ACCOUNT\_ID and AWS\_R

2 min read · [blog.pradeepbhattarai.me](https://blog.pradeepbhattarai.me/solving-assumptions-of-life-winja-ctf-nullcon-goa-2022?utm_source=hashnode&utm_medium=feed)

[Pradip Bhattarai](https://hashnode.com/@prdp1137) · [Sep 9, 2022](https://hashnode.com/posts/solving-crater-problem-winja-ctf-nullcon-goa-2022/631b5dca3e8d6f3497ad0489)

### [Solving Crater Problem: Winja CTF | Nullcon Goa 2022](https://blog.pradeepbhattarai.me/solving-crater-problem-winja-ctf-nullcon-goa-2022?utm_source=hashnode&utm_medium=feed)

Summary The challenge started with the description along with the Terraform state file. This challenge involved the misconfiguration within the AWS policy allowing any AWS account to perform multiple actions against the vulnerable AWS service configu...

3 min read · [blog.pradeepbhattarai.me](https://blog.pradeepbhattarai.me/solving-crater-problem-winja-ctf-nullcon-goa-2022?utm_source=hashnode&utm_medium=feed)