LEVEL 4

Dream Lectures

web

941

69

Sign in and solve the challenge

Description
Writeups 7
Difficulty votes 20
Questions 5
Solvers 69
Comments 2

This challenge is from Dreamhack CTF Season 2 Round #10 .

Description

Description

강의를 신청할 수 있는 웹사이트입니다.
신청서를 작성하여 제출하면 어드민 봇이 자동으로 읽습니다.

웹 사이트의 취약점을 찾고 공격하여 플래그를 획득하세요!
어드민 세션으로 /admin에 접근하면 플래그를 획득할 수 있습니다.

플래그 형식은 DH{...} 입니다.

Author

No badge

2022.11.30. 14:00:00

First Blood!

2024 Invitational Contenders

Solved in just 1 hour!

Difficulty votes 20

Full voting log

사이보그

Has voted on this challenge to LEVEL 4.

2 months ago

No badge

Has voted on this challenge to LEVEL 5.

9 months ago

Christmas CTF 참여

Has voted on this challenge to LEVEL 4.

11 months ago

2022 Christmas CTF 참여

Has voted on this challenge to LEVEL 4.

11 months ago

워게임: 50

Has voted on this challenge to LEVEL 4.

1 year ago

Questions 5

Need help? Ask your question and get hints!

I have a question!

I'm not sure how to approach it. I don't think it's an SQL injection, and it's not csp bypass.. Please give me a hint...

Deactivated user

Approach direction

Is it correct <application_id>to use /application/? I have confirmed that there is a reason why the tags or values I entered remain on the server, and the <application_id>index is increased by 1. I wonder if I can call this... <application_id>For example, add /application/ to the source in the tag

이문제 csp우회는 맞는거같은데 unsafe인라인으로 통한 스크립트삽입인가요 nonce를 예측하는 문제인가요 아님둘다아닌가요 누군가 살려주세요

I don't know how to approach

Where should I get the first start?

I just don't know..

Do I need to predict the nonce value? I'm not even using the base tag in the course;; I have no idea how to bypass csp...

No badge

1 month ago

No badge

1 month ago

No badge

1 month ago

No badge

1 month ago

사이보그

2 months ago

꿈나무

3 months ago

워게임 고인물

3 months ago

No badge

4 months ago

No badge

4 months ago

No badge

5 months ago

Comments 2

No badge

4 months ago

리버싱...?

해결사

1 year ago

좋은 문제입니다~