Tags: web ritsecctf 2019 

Rating:

Buckets of Fun - 100

http://bucketsoffun-ctf.s3-website-us-east-1.amazonaws.com/

Solution

Open the given http://bucketsoffun-ctf.s3-website-us-east-1.amazonaws.com
It’s clear that the challenge has something to do with aws s3 buckets as per challage name & URL
May be the aws bucket has flag file
Open the base aws s3 link at [https://bucketsoffun-ctf.s3.amazonaws.com]
Here we can observe the following source code

<ListBucketResult> <Name>bucketsoffun-ctf</Name> <Prefix/> <Marker/> <MaxKeys>1000</MaxKeys> <IsTruncated>false</IsTruncated> <Contents>< <Key>index.html</Key> <LastModified>2019-11-18T14:05:20.000Z</LastModified> <ETag>"b271e7783d480770f61670d6b234e1ed"</ETag> <Size>630</Size> <StorageClass>STANDARD</StorageClass> </Contents> <Contents> <Key>youfoundme-asd897kjm.txt</Key> <LastModified>2019-11-18T14:05:20.000Z</LastModified> <ETag>"a920cc3c8aaa05c1afe96a78d0adbcda"</ETag> <Size>25</Size> <StorageClass>STANDARD</StorageClass> </Contents> </ListBucketResult>

There is a file youfoundme-asd897kjm.txt which has required flag
Original writeup (https://sp0il3rs.github.io/write-ups/#buckets).