CTFtime.org

DataVault

by M42D / BawlSec

Rating: 1.0

I was partying and hung over for most of the weekend, but I coudn't resist checking out some challenges on my phone.

First I checked for sql injections.

  • no results there.

Then I checked for loose-compairison issues.

success!

Comments

ShiawasenaHoshi – April 8, 2019, 5:25 a.m.

Not working. I tried same actions in "Insomnia" (linux) and "Http client" that you use and I got no result. Response is:
<html><head> <title>Andrew's Secret Image Storage!</title></head><body> <h1>Andrew's Secret Image Storage!</h1>

Hello visitor! If I, Andrew, have given the password to view my image, please enter it below. If not, please kindly leave this site. :)


<form action="/" method="POST"> <label>What's the password?</label> <input type="text" name="password" /> <input type="submit" value="Submit" /> </form>

Hermpt, that's not it. :/ Please try again!</body>

ShiawasenaHoshi – April 8, 2019, 11:57 a.m.

everything ok!) I found where I made mistake )