-
Notifications
You must be signed in to change notification settings - Fork 0
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Hacker101: 0th flags of first 2 challenges
- Loading branch information
1 parent
c87d28d
commit 28cb10b
Showing
3 changed files
with
50 additions
and
2 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,27 @@ | ||
# A little something to get you started | ||
|
||
## Flag 0 | ||
|
||
Get the source code by inspecting or curl. | ||
|
||
```bash | ||
curl https://xxxxxxxxxx.ctf.hacker101.com/ | ||
``` | ||
|
||
```html | ||
. | ||
. | ||
<style> | ||
body { | ||
background-image: url("background.png"); | ||
} | ||
</style> | ||
. | ||
. | ||
``` | ||
|
||
The presence of bg image for a page with white bg seems suspicious. Go to the `background.png` using browser or curl, and there's the flag. | ||
|
||
```bash | ||
curl https://xxxxxxxxxx.ctf.hacker101.com/background.png | ||
``` |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,19 @@ | ||
# Micro-CMS v1 | ||
|
||
## Flag 0 | ||
|
||
Exploring the site gives us few observations: | ||
|
||
- It's a markdown page editing site. | ||
- New page can be created at `/page/create` | ||
- Pages can be viewed at `/page/<page-num>` and edited at `/page/edit/<page-num>` | ||
|
||
_Testing_ is page-1 and _Markdown Test_ is page 2. On creating new pages, the page numbers assigned are 11, 12,... \ | ||
This seems weird. Viewing all pages from 3 to 10, all give **Page Not Found**, except for the 5th page which says **Forbidden** -- read-protected. \ | ||
Hmm..it's _read-protected_, is it _write-protected_? Go to `/page/edit/5` and there's the flag. | ||
|
||
## Flag 1 | ||
|
||
## Flag 2 | ||
|
||
## Flag 3 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters