Secret header - Revision history

Exf at 13:24, 9 September 2022

2022-09-09T13:24:50Z

← Older revision		Revision as of 13:24, 9 September 2022
Line 1:		Line 1:
			[[File:Secret-header.PNG\|thumb\|Secret header]]

	===Description===		===Description===
	100pts		100pts

2022-09-09T13:23:45Z

← Older revision		Revision as of 13:23, 9 September 2022
Line 10:		Line 10:

	===Solution===		===Solution===
	When you go and browse the URL with curl you will notice that it redirects to page.php. If you curl that address you will get notified that you have to use firefox browser in linux and you can not use		When you go and browse the URL with curl you will notice that it redirects to page.php. If you curl that address you will get notified that you have to use firefox browser in linux and you can not use <code>GET, PUT, OPTIONS, DELETE, HEAD or PATCH</code> -reguests. As you can see you still can use POST method.

			So crafting command witch uses curl and modify user agent to be as firefox at linux you get part the flag.

			<code>curl -vvv http://shared.target05:1235/page.php -X POST -H "User-Agent: Mozzilla/5.0 (X11; Linux x68_64; rv:91.0) Gecko/20100101 Firefox/91.0"</code>

			Then you will get the flag but you have to run it still through ROT13 as the hint shows. Cyberchef is good tool for that.

	===Tools===		===Tools===
			* Curl
			* Firefox
			* Cyberchef https://gchq.github.io/CyberChef/#recipe=ROT13(true,true,false,13)&input=OTQzcDQ2cnItMzMzNi00OG5zLW9vNzQtNDU5bzBzMzAzOTA3

	===Flag===		===Flag===

2022-09-09T13:18:29Z

← Older revision		Revision as of 13:18, 9 September 2022
Line 10:		Line 10:

	===Solution===		===Solution===
			When you go and browse the URL with curl you will notice that it redirects to page.php. If you curl that address you will get notified that you have to use firefox browser in linux and you can not use

	===Tools===		===Tools===

2022-09-09T13:17:06Z

Flag

← Older revision		Revision as of 13:17, 9 September 2022
Line 14:		Line 14:

	===Flag===		===Flag===
			<code>943c46ee-3336-48af-bb74-459b0f303907</code>

	===Links===		===Links===
	*[[CTF Challenges \| Back to CTF Challenges page]]		*[[CTF Challenges \| Back to CTF Challenges page]]

2022-09-09T13:04:47Z

← Older revision		Revision as of 13:04, 9 September 2022
Line 1:		Line 1:
	===Description===		===Description===
			100pts

			Based on the information from national Cyber Security Incident Response Team, one sevice is infected with malware and communicating with malicious C&C server.

			Connecting to C&C server from other systems is impossible, since secret http header value is unknown.

	===Question===		===Question===
			Access the compromised server URL and find out secret HTTP header message.

	===Solution===		===Solution===

2022-09-05T12:50:16Z

Created page with "===Description=== ===Question=== ===Solution=== ===Tools=== ===Flag=== ===Links=== * Back to CTF Challenges page"

New page

===Description===

===Question===

===Solution===

===Tools===

===Flag===

===Links===
*[[CTF Challenges | Back to CTF Challenges page]]