Rating:
Looking at the challenge, we are given a link http://phpfuck.chal.uiuc.tf
.
Visiting that link tells us the flag is at /flag.php
.
Let's try accessing the flag straight by navigating to http://phpfuck.chal.uiuc.tf/flag.php
.
It tells us No flag for you!
. Let's take a closer look at the site by viewing the source view-source:http://phpfuck.chal.uiuc.tf/flag.php
.
And we have a flag!
The flag is hidden in as a php comment and the final flag is uiuctf{pl3as3_n0_m0rE_pHpee}
.
This was the easier version of phpfuck_fixed
.
What we learned is that don't overthink, the answer might be hidden in plain sight.