Gallery

Humans are dumb and horrible, but cats are terribly CUTE!! - said an AI.

Access Info : http://cddc2023-gallery.s3-website-ap-southeast-1.amazonaws.com/

The challenge was presented as a web application vulnerability exercise, aimed at testing our skills in identifying and exploiting security weaknesses commonly found in web applications. We were provided with a linkarrow-up-right to access the target website and tasked with finding and retrieving a hidden flag.

Homepage

The homepage does not seem of interest and so we clicked the button "Go to next page". It redirected us to another page with the link /third.html

third.html

After seeing that URL path, we intuitively thought there would be a /second.html, and so we tried accessing it but the page redirects us back to /third.html.

We then decided to employ the 'curl' command-line tool. Curlarrow-up-right is a powerful utility that allows sending HTTP requests and retrieving the corresponding responses. In this case, we used it to retrieve the contents of the hidden webpage.

Et voila! We managed to retrieve the flag!

Flag!!

Last updated