Tuesday, April 24, 2018

NoNameConCTF - Convert Writeup

by Guilherme "k33r0k" Assmann

NoNameConCTF - Convert Writeup

Convert 100

If you need to convert something to Markdown, you can try our service: http://convert.nonameconctf2018.xyz

This challenge quickly illustrates a ssrf.

One of the first things I tried was to access localhost / 127.0.0.1, but without success:

So I decided to try to do with 0.0.0.0 and it worked!

But I did not know what to look for, so I did the simple, a brute of directories:

So finally, I just did the ssrf asking for the file:

Capture the Flag , Writeup