Description

Find the FLAG and win Intigriti swag! 🏆

Bounties

This is a responsible disclosure program without bounties.

Rules of engagement
Not applicable
Not applicable
Not applicable
Not applicable

N/A

Assets
In scope

Rules:

This challenge runs from 19/06/2025 4:00 PM until 26/06/2025, 11:59 PM UTC.

Out of all correct submissions, we will draw six winners on Monday 30/06/2025:

  • Three randomly drawn correct submissions
  • Three best write-ups

Every winner gets a €50 swag voucher for our swag shop

The winners will be announced on our X profile.

For every 100 likes, we'll add a tip to announcement post.

Join our Discord to discuss the challenge!

The solution:

  • Should leverage an RCE on the server without sandbox.
  • Shouldn't exploit a 0-day or Chromium RCE.
  • Should include:
  • The flag in the format INTIGRITI{.*}
  • The payload(s) used
  • Steps to solve (short description / bullet points)
  • Should be reported on the Intigriti platform.

Get started:

Download the challenge source code!

Out of scope

N/A

Severity assessment

N/A

FAQ

N/A

All aboard!
Please log in or sign up on the platform

For obvious reasons we can only allow submissions or applications for our program with a valid Intigriti account.

It will only take 2 minutes to create a new one or even less to log in with an existing account, so don't hesitate and let's get started. We would be thrilled to have you as part of our community.

Program specifics
Not managed by Intigriti
Overall stats
submissions received
4
average payout
N/A
accepted submissions
3
total payouts
N/A
Last 90 day response times
avg. time first response
< 2 hours
avg. time to decide
< 4 hours
Activity
6/21
logo
whatevicanhaz
created a submission
6/20
intigriti
accepted a submission
6/20
logo
arsen
created a submission
6/20
intigriti
accepted a submission
6/20
logo
j0r1an
created a submission
6/20
intigriti
accepted a submission
6/19
logo
simonedimaria
created a submission
6/19
intigriti updated the confidentiality level to public
6/19
intigriti updated the confidentiality level to registered
6/19
intigriti updated the confidentiality level to application