Skip to content

Commit

Permalink
Hacker101: 0th flags of first 2 challenges
Browse files Browse the repository at this point in the history
  • Loading branch information
harshit-jain52 committed Jan 10, 2025
1 parent c87d28d commit 28cb10b
Show file tree
Hide file tree
Showing 3 changed files with 50 additions and 2 deletions.
27 changes: 27 additions & 0 deletions Hacker101-CTF/A little something to get you started.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,27 @@
# A little something to get you started

## Flag 0

Get the source code by inspecting or curl.

```bash
curl https://xxxxxxxxxx.ctf.hacker101.com/
```

```html
.
.
<style>
body {
background-image: url("background.png");
}
</style>
.
.
```

The presence of bg image for a page with white bg seems suspicious. Go to the `background.png` using browser or curl, and there's the flag.

```bash
curl https://xxxxxxxxxx.ctf.hacker101.com/background.png
```
19 changes: 19 additions & 0 deletions Hacker101-CTF/Micro-CMS v1.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
# Micro-CMS v1

## Flag 0

Exploring the site gives us few observations:

- It's a markdown page editing site.
- New page can be created at `/page/create`
- Pages can be viewed at `/page/<page-num>` and edited at `/page/edit/<page-num>`

_Testing_ is page-1 and _Markdown Test_ is page 2. On creating new pages, the page numbers assigned are 11, 12,... \
This seems weird. Viewing all pages from 3 to 10, all give **Page Not Found**, except for the 5th page which says **Forbidden** -- read-protected. \
Hmm..it's _read-protected_, is it _write-protected_? Go to `/page/edit/5` and there's the flag.

## Flag 1

## Flag 2

## Flag 3
6 changes: 4 additions & 2 deletions generate_readme.py
Original file line number Diff line number Diff line change
Expand Up @@ -30,8 +30,10 @@ def generate_readme():
## Practice & Compete
- [CTFLearn](https://ctflearn.com)
- [Pwnable.kr](https://pwnable.kr/)
- [CTFTime](https://ctftime.org/)
- [Pwnable.kr](https://pwnable.kr/) for Pwning
- [CTF.Hacker101](https://ctf.hacker101.com/) for Web Expoitation
- [Cryptohack](https://cryptohack.org/challenges/) for Cryptography
- [CTFTime](https://ctftime.org/) for Upcoming CTFs
## Resources & Tools
Expand Down

0 comments on commit 28cb10b

Please sign in to comment.