--- title: Web-RTA Exam Writeup — Passed | CyberWarFare Labs description: A step-by-step exam writeup for the Web-RTA (Web Red Team Analyst) certification by CyberWarFare Labs. The author walks through all 16 flags across two... canonical: https://daily.dev/posts/web-rta-exam-writeup-passed-cyberwarfare-labs-aqdcyefu1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Web-RTA Exam Writeup — Passed | CyberWarFare Labs | daily.dev og:description: A step-by-step exam writeup for the Web-RTA (Web Red Team Analyst) certification by CyberWarFare Labs. The author walks through all 16 flags across two... og:url: https://daily.dev/posts/web-rta-exam-writeup-passed-cyberwarfare-labs-aqdcyefu1 og:image: https://api.daily.dev/og/posts/aQDcyEfu1.png og:image:alt: Web-RTA Exam Writeup — Passed | CyberWarFare Labs og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Web-RTA Exam Writeup — Passed | CyberWarFare Labs **[InfoSec Write-ups](https://daily.dev/sources/infosecwriteups)** · 9 min read · 4 upvotes · 0 comments ## Summary A step-by-step exam writeup for the Web-RTA (Web Red Team Analyst) certification by CyberWarFare Labs. The author walks through all 16 flags across two black-box web applications, covering JWT algorithm:none exploitation, SQL injection for admin bypass, XXE to read /etc/passwd, SSRF with multi-layer encoding (hex+Base64), OAuth scope manipulation, and OTP brute force via Burp Intruder. The writeup includes a full attack chain summary, tools used (feroxbuster, Burp Suite, jwt.io), and key lessons on chaining web vulnerabilities in realistic scenarios. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [CRTA Exam Writeup — Passed \| CyberWarFare Labs](https://daily.dev/posts/crta-exam-writeup-passed-cyberwarfare-labs-xqekscdqm) · InfoSec Write-ups · 0 upvotes · 0 comments - [I Am Now a Certified Red Team Analyst \(CRTA\) — My Journey with CyberWarFare Labs](https://daily.dev/posts/i-am-now-a-certified-red-team-analyst-crta-my-journey-with-cyberwarfare-labs-s7rzqsqmy) · InfoSec Write-ups · 2 upvotes · 0 comments - [Certified Red Team Analyst — Exam Review](https://daily.dev/posts/certified-red-team-analyst-exam-review-qaiwunaxm) · InfoSec Write-ups · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#webdev](https://daily.dev/tags/webdev), [#jwt](https://daily.dev/tags/jwt), [#burp-suite](https://daily.dev/tags/burp-suite) [View this post on daily.dev](https://daily.dev/posts/web-rta-exam-writeup-passed-cyberwarfare-labs-aqdcyefu1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Web-RTA Exam Writeup — Passed | CyberWarFare Labs","url":"https://daily.dev/posts/web-rta-exam-writeup-passed-cyberwarfare-labs-aqdcyefu1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/web-rta-exam-writeup-passed-cyberwarfare-labs-aqdcyefu1"},"datePublished":"2026-06-19T11:56:48.552Z","dateModified":"2026-06-20T08:20:24.890Z","description":"A step-by-step exam writeup for the Web-RTA (Web Red Team Analyst) certification by CyberWarFare Labs. The author walks through all 16 flags across two...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9874e839289de944d00949e0f375ae69?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/9874e839289de944d00949e0f375ae69?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"InfoSec Write-ups","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"InfoSec Write-ups","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/f0dc21b5bbfd46fda36f7b4b53dd1705","url":"https://daily.dev/sources/infosecwriteups"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/web-rta-exam-writeup-passed-cyberwarfare-labs-aqdcyefu1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":4},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,webdev,jwt,burp-suite","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"InfoSec Write-ups","item":"https://daily.dev/sources/infosecwriteups"},{"@type":"ListItem","position":3,"name":"Web-RTA Exam Writeup — Passed | CyberWarFare Labs"}]} ```