Rating: 1.0

# **Smuggle**(web)

[challenge url](https://192.34.57.73:8001/)
![](https://i.imgur.com/SBTlVUU.png)

when i go to https://192.34.57.73:8001/flag i got **400 status code**
than i concluded that it needs to use as this as tunnel to make request to backend server.

by using this script : https://github.com/BishopFox/h2csmuggler (thanks to author)
![](https://i.imgur.com/YM6a0F3.png)

# flag : b00t2root{so_you_know_how_to_smuggle}

Original writeup (https://github.com/Red-Knights-CTF/writeups/tree/master/2020/Boot2root_ctf/Smuggle).