HAC CTF 2025

HAC CTF 2025 is a CTF sponsored by hAPI Labs: “HAPI Labs is a cybersecurity consulting and penetration testing firm specializing in API security. We help organizations identify vulnerabilities”. It was an in-person (and remote) event at HAC 2025 (Hacking APIs Conference).

Challenges

• |SSRFS Up
• Header Hijack
• Time Vault
• Let’s Try This Again
• Loose Lips
• Operation Admin Access
• Operation Hidden Drafts
• Timing Leaks Everything
• Tick Tock Login Clock