FireShell Security Team
Home Team Articles Sponsors About

NoNameConCTF - Convert Writeup

NoNameConCTF - Convert Writeup

Convert 100

If you need to convert something to Markdown, you can try our service: http://convert.nonameconctf2018.xyz

This challenge quickly illustrates a ssrf.

One of the first things I tried was to access localhost / 127.0.0.1, but without success:

So I decided to try to do with 0.0.0.0 and it worked!

But I did not know what to look for, so I did the simple, a brute of directories:

So finally, I just did the ssrf asking for the file:

© 2017 - 2018 FireShell Security Team. All rights reserved.