Tags: header web x-forwarded-for 

Rating:

SunshineCTF - Home Sweet Home
-------------------------
**Category:** Web

**Points:** 150

##### Description:
```
Looks like this site is doing some IP filtering.
That's very FORWARD thinking of them.

Have fun!

http://web1.sunshinectf.org:50005

Author: hackucf_levi
```
Upon visiting the site we're prompted with the following text:
```
14.212.11.223This IP address is not authorized
```
From this we can see that they site has indeed put restrictions based on a user's IP, and the description gives us a big hint by saying **FORWARD**, from here I assumed that they were using X-Forwarded-For to filtering IPs, so I added ``X-Forwarded-For: 127.0.0.1`` to my header and sent the request again and bingo we get the flag!
```
127.0.0.1Here's your flag: sun{Th3rEs_n0_pl4cE_l1kE_127.0.0.1}
```

Original writeup (https://github.com/notdls/ctf-write-ups/blob/master/SunshineCTF_2018/homesweethome.md).