Tags: web 

Poll rating:

Hey there intern! We have a rocket launch scheduled for noon today and the launch interface is down. You'll need to directly use the API to launch the rocket. No, we don't have any documentation. And quickly, our shareholders are watching! Website https://space.sdc.tf/

Solution:

curl 'https://space.sdc.tf/api/rocketLaunch?verbose=true' --header "Content-Type: application/json" --request POST --data '{"rocket": "triton", "launchTime": "12:00", "pumpID": 4, "Token": yiLYDykacWp9sgPMluQeKkANeRFXyU3ZuxBrj2BQ"}

was the solution. Found token in the js file. Bruteforced each of the parameters and got it right manually. Kinda guessy. It was okay.

Writeups

ActionRatingAuthor team
Read writeup
not rated
OpenToAll
Read writeup
not rated
mcmayhem
Read writeup
not rated
fr334aks
Read writeup
not rated
soski_nerealki
You need to authenticate and join a team to post writeups