Tuesday, April 24, 2018

NoNameConCTF - Convert Writeup

by Guilherme "k33r0k" Assmann

Convert 100

If you need to convert something to Markdown, you can try our service: http://convert.nonameconctf2018.xyz

This challenge quickly illustrates a SSRF.

One of the first things I tried was to access localhost /, but without success:

So I decided to try to do with and it worked!

But I did not know what to look for, so I did the simple, a brute of directories:

So finally, I just did the ssrf asking for the file:

Capture the Flag , Server Side Request Forgery , Web , Writeup