1
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?

【HTB Cyber Apocalypse 2024】:Web -Flag Command-Writeup

Posted at

問題概要

Embark on the "Dimensional Escape Quest" where you wake up in a mysterious forest maze that's not quite of this world. Navigate singing squirrels, mischievous nymphs, and grumpy wizards in a whimsical labyrinth that may lead to otherworldly surprises. Will you conquer the enchanted maze or find yourself lost in a different dimension of magical challenges? The journey unfolds in this mystical escape!

「次元脱出クエスト」に乗り出し、目覚めるとそこはこの世のものではない神秘的な森の迷路です。 歌うリス、いたずら好きなニンフ、不機嫌そうな魔法使いたちとともに、別世界のような驚きにつながるかもしれない風変わりな迷宮を進んでください。 魔法の迷路を征服しますか、それとも別の次元の魔法の挑戦に迷い込んでしまいますか? 旅はこの神秘的な逃避行の中で展開します!

サイトにアクセスすると4択のミニゲームが用意されています。

FlAG_COMMAND_START.png

解法

Burpで確認すると/api/optionsというエンドポイントが確認できます。

flag_command_endpoint.png

secretキーの文字列を送信するとフラグが表示されます。

FLAG COMMAND GET FLAG.png

1
0
0

Register as a new user and use Qiita more conveniently

  1. You get articles that match your needs
  2. You can efficiently read back useful information
  3. You can use dark theme
What you can do with signing up
1
0

Delete article

Deleted articles cannot be recovered.

Draft of this article would be also deleted.

Are you sure you want to delete this article?