Project Sekai - ✅-web-urmombotnetdotnetcom-5

urmombotnetdotnet.com 5 - 500 points

Category: Web Description: During my databases class, my group and I decided we'd create a web app with the domain urmombotnetdotnet.com, and wrote the relevant code. At first glance, it looks pretty good! I'd say we were pretty thorough. But were we thorough enough?? Oh... we also forgot to make the front end :) byuctf.xyz:40010 -------------------- What is flag 5? (see byuctf{fakeflag5} in source) (see source from first chall) Files: No files. Tags: Hard

Sutx pinned a message to this channel. 05/19/2023 10:01 AM

@Violin wants to collaborate

10:08

@rubiya wants to collaborate

10:12

@Legoclones wants to collaborate

10:12

@jayden wants to collaborate

@strellic wants to collaborate

11:33

✅ Challenge solved.

byuctf{IPv6_scopes_are_just_arbitrary_strings...maybe_there_are_more_vulns_worldwide?}

11:33

use ip FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF

oh

11:33

i guess that works too

what was intended lol

11:35

also i thought this was a fun series of challenges

11:35

i liked it

something like

"2001:db8::1000%111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111"

, in IPv6 you can put anything after % char

11:35

even like "2001:db8::1000%; whoami"

11:35

I'm glad!

oh huh thats interesting

11:35

cool!

ggs