CTFLEARN | Challenge 114 : POST Practice — Walkthrough

Category: Web Exploitation

Level: Medium

Point: 40

Question: This website requires authentication, via POST. However, it seems as if someone has defaced our site. Maybe there is still some way to authenticate? http://165.227.106.113/post.php

Today we are going to solve the challenge CTFLEARN 114 challenge. So let’s solve it.

Step 1 : After signing in head towards the challange no. 114. Click on the link “http://165.227.106.113/post.php” which will redirect you to this site…

Step 2 : It says “This site takes POST data that you have not submitted!”. Let’s try to View Source Page so right click and select theView Source Page option.

We got the Username and password i.e username: admin | password: 71urlkufpsdnlkadsf. So let’s try to curl it in the next step.

Step 3 : Open the terminal and paste the below command over there and hit enter.

curl -X POST -d 'username=admin' -d 'password=71urlkufpsdnlkadsf' 165.227.106.113/post.php

Step 4 : Yaah! We got the flag “flag{pOst_d4t4_411_d4y}”. Now, the final step is to submit the flag in proper format. So align it in proper format i.e “CTFlearn{p0st_d4t4_4ll_d4y}”.

Thanks for reading and Happy Hacking.