CTFtime.org

DataVault

by M42D / BawlSec

Rating: 1.0

I was partying and hung over for most of the weekend,
but I coudn't resist checking out some challenges on my phone.

First I checked for sql injections.
- no results there.

Then I checked for loose-compairison issues.

![](http://robertmccallum.nl/wp-content/uploads/2019/04/8cc81dbd-2c6b-486b-8cf4-d2b145ed8a7f.jpeg)

![](http://robertmccallum.nl/wp-content/uploads/2019/04/50270565-4ef2-4513-84fa-469669f4e862.jpeg)

success!

Comments

ShiawasenaHoshi – April 8, 2019, 5:25 a.m.

Not working. I tried same actions in "Insomnia" (linux) and "Http client" that you use and I got no result. Response is:
<html><head> <title>Andrew's Secret Image Storage!</title></head><body> <h1>Andrew's Secret Image Storage!</h1>

Hello visitor! If I, Andrew, have given the password to view my image, please enter it below. If not, please kindly leave this site. :)


<form action="/" method="POST"> <label>What's the password?</label> <input type="text" name="password" /> <input type="submit" value="Submit" /> </form>

Hermpt, that's not it. :/ Please try again!</body>

ShiawasenaHoshi – April 8, 2019, 11:57 a.m.

everything ok!) I found where I made mistake )