Skip to content

Latest commit

 

History

History
62 lines (50 loc) · 1.61 KB

README.md

File metadata and controls

62 lines (50 loc) · 1.61 KB

Go Get it!

PROBLEM

Head over to the link below to find the flag. LINK

HINT

Can you send a get parameter through url.

For example:

https://www.google.com/search?q=flag

SOLUTION

After you head over to the given link you'll see something like:

This is just a decoy of the FLAG! If you ask nicely, maybe i will give it to you. View Source Code of this page Here

The Page source is:

<!DOCTYPE html>
<html>
<head>
    <title>Flag!Flag!Flag!</title>
    <link rel="stylesheet" href="css/main.css">
</head>
<body>
    <div class='contain-flag'>
      <div class='pole'></div>
      <div class='flag'></div>
      <div class='shadow'></div>
      <div class='flag flag-2'></div>
    </div>
    <div>
        <center>
        <h3>This is just a decoy of the FLAG!</h3>
        <small>If you ask nicely, maybe i will give it to you.</small>
        <small>View Source of this page <a href="https://pastebin.com/LvfdATxz" target="_blank">Here</a></small>
        </center>
    </div>
    <pre><?php
    $flag = #REDACTED

    if(array_key_exists("flag", $_GET)) {
        if($_GET["flag"] === "true"){
        echo $flag;
        }
    }
    ?>
    </pre>
</body>
</html>

If you'll see the PHP in the source of the page you'll notice that it is checking whether there exists a flag query in the sent requests or not. So all we have to do it send that and that can be done by adding ?flag=true to the given URL so the full URL becomes http://104.248.49.223:7070/?flag=true. That will give you the flag.

Flag - GLUG{4lw4y5_fuzz_f0r_h1dd3n_p4r4m373r5}