• CTF
  • Kotlin

DNS Rebinding in Kotlin (webwebhookhook - irisCTF 2025)

January 12, 2025

Kotlin may be a fancy new language, but it still inherits all the weird quirks that Java has accumulated over the years.

This CTF challenge shows off one of these quirks, and how URLs can be abused to retrieve the flag.

Read more