Ulli Weichert/ April 7, 2022/ IT-Security, Write-Ups/ 0Kommentare

Secrets

Description

We have several pages hidden. Can you find the one with the flag?
The website is running here.

Solving

1. Visiting the website does not really help... but the hint tells that there are some folders. Because gobuster or other fuzzing tools in CTF is not really nice to the infrastructure I tested the usual things:

   • robots.txt -> nothing there
   • sitemap.xml -> nothing there

2. After some further tests I tried the obvious '/secret/' folder... and bam!

3. In the sourcecode of this page, we can see a '/hidden/' folder.

       <link rel="stylesheet" href="hidden/file.css" />

4. Goto the hidden folder, we get a new page where we can see a '/superhidden/' folder.

       <link href="superhidden/login.css" rel="stylesheet" />

5. The new page in the superhidden folder tells us Finally. You found me. But can you see me

6. Quick look at the source code or selecting everything on the side, will reveal the flag 🙂

#!/bin/bash
curl http://saturn.picoctf.net:49810/secret/hidden/superhidden/ > /dev/null 2>&1| grep -o "picoCTF{.*}"