Ctflearn Post Practice Writeup

28 Jul 2024

Hey there!

This is my writeup for the POST practice challenge on CTFlearn

First, I opened up the URL and opened the page source.

I found that an admin username and password is found in the page source as shown here:

Since this site accepts POST data (according to the page content), I decided to use curl to form a request.

Assuming that the username parameter is “username” and the password follows suit with it being “password” i made this command:

curl 165.227.106.113/post.php -d "username=admin&password=71urlkufpsdnlkadsf"

Which returns this value:

<h1>flag{[REDACTED]}</h1>

Thanks for reading!