Bincord Challange {CrypteraCTF}

Challenge: Bincord
Category: Web Exploitation
Difficulty: Medium
Description: Mom said we have discord at home :(
Files : No files
Links : Just the instance link

at the first i looked up the site

just a login and register page!

i tried to sql-inject it but nothing helped so i registered an account

i can see there’s an add button up imma look it up.

okay i can search a conversation imma try flag or ctf/Cryptera maybe it come up with something

Still nothing imma search admin and see if there’s anything might help

okay that’s Good! let’s see what can we do here.

it’s an automatic reply maybe it needs a key to give me the flag!

same maybe it’s something else imma open burb suite

Okay intresting

{
"content":"flag",
"conversation_uuid":"09e6a876-1a57-4b7a-89bd-3a30d7206770",
"created_at":"2026-05-09T17:12:34.571035",
"message_uuid":"ed2ded54-b980-4fea-8ea7-4102740cbc87",
"sender":
{"is_bot":false,
"user_uuid":"2c5ad619-8389-4db4-be72-9fc0ef218649",
"username": "yy"

},
{"content": "I'm currently handling other tickets. Please wait for a response.",
"conversation_uuid":"09e6a876-1a57-4b7a-89bd-3a30d7206770",
"created_at":"2026-05-09T17:12:36.099094",
"message_uuid":"159fa70e-1424-41a6-b0f8-4502743aa0f9",
"sender":{
    "is_bot":true,
    "user_uuid":"edb85cde-d6b5-4c47-9cd5-a9f29207f373",
    "username":"Admin"
    }
}

/api/users/{UUID}/conversations

hmmmm imma try to put his uuid maybe i’ll get access to the chat yah?

O’h fr? okay let’s see if there’s anything important

Okay i found the Flag!

CrypteraCTF{1d0r_w1th_uu1d_l34ks_4r3_fun}

GG’s

i wanna thank 0xPh4nt0m for his help!

Solved by:

Cicada_Guy