Tags: firebase
Rating:
When we intercept the request of
http://20yjtzrx50hpypicbajmro9dy.ctf.p0wnhub.com:8888/
We see that it is redirecting to firebase host related to HZVIII which is:
```
hzviii.firebaseio.com
```
and when we search on internet we can get some information about misconfiguration in firebases
which appears in ".json" so we proceed the request
```
hzviii.firebaseio.com/.json
```
And Bingo we get the Flag:
```
{"flag":"HZVIII{f1r3b453_d474b453_m15c0nf16ur4710n}"}
```