Hey there intern! We have a rocket launch scheduled for noon today and the launch interface is down. You'll need to directly use the API to launch the rocket. No, we don't have any documentation. And quickly, our shareholders are watching! Website https://space.sdc.tf/
Solution:
curl 'https://space.sdc.tf/api/rocketLaunch?verbose=true' --header "Content-Type: application/json" --request POST --data '{"rocket": "triton", "launchTime": "12:00", "pumpID": 4, "Token": yiLYDykacWp9sgPMluQeKkANeRFXyU3ZuxBrj2BQ"}
was the solution. Found token in the js file. Bruteforced each of the parameters and got it right manually. Kinda guessy. It was okay.
Action | Rating | Author team |
---|---|---|
Read writeup |
not rated
|
OpenToAll |
Read writeup |
not rated
|
mcmayhem |
Read writeup |
not rated
|
fr334aks |
Read writeup |
not rated
|
soski_nerealki |