# Web - General

*   ## No Crawl

    <figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FmwdrK0NB8Qph5DSvHAHt%2Fimage.png?alt=media&#x26;token=4f672daf-b8fa-4ed1-91ba-e32a756b1e89" alt="" width="364"><figcaption></figcaption></figure>



Try to go to `robots.txt` and apparently give next step to obtain flag, which I need to go to `/.r0b0fl4gchal1c`.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FOsHnnO0td1e6ufXibKIB%2Fimage.png?alt=media&#x26;token=6e98bb69-0c2c-4c86-ad9f-66490fb604a0" alt="" width="563"><figcaption></figcaption></figure>

From the directory, it showed base64 encoded flag and I decode through cyberchef to get the actual flag.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FBuem3MryWqO2QWCUaucW%2Fimage.png?alt=media&#x26;token=429ad241-e586-4137-a035-a4ddd4a6fd9d" alt="" width="563"><figcaption></figcaption></figure>

Flag: `CURTIN_CTF{B0T530T5BOTSB0T555555BOTS}`

***



*   ## Content Missing - I



    <figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FRIJO4X9TdIK5G4PWJyA1%2Fimage.png?alt=media&#x26;token=a52f9f08-1fe2-4e24-9bed-31d30e40b4b9" alt="" width="407"><figcaption></figcaption></figure>



Scrolling through web page i stumble upon this image, which give us some kind of other directory? Going to the `/homeChall` directory give me nothing..



<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FeQuvptPaBc0RhHANSZST%2Fimage.png?alt=media&#x26;token=10059e6e-ae4e-41c3-a16a-3416d2b4ee1b" alt="" width="317"><figcaption></figcaption></figure>

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FxCClBW6eoIPTYkKyZYAr%2Fimage.png?alt=media&#x26;token=96767666-e215-4e88-a960-aee620ff47a7" alt="" width="563"><figcaption></figcaption></figure>

Since I pretty lazy to intercept the request and view the http header. Network on inspect in firefox is working just fine for me to show suspicious Content-Location on http header, which is `/h0m3fl4g15h3r3`. Finally, going to the directory give me the flag.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FmrsR91DbRkyb75DCyi6Q%2Fimage.png?alt=media&#x26;token=1124bff4-17e7-47d9-94b3-1989a16bf9c6" alt="" width="413"><figcaption></figcaption></figure>

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2F27iODcRmH8H010CoyxWw%2Fimage.png?alt=media&#x26;token=3d9239f0-3b5c-4eba-a21b-44cabfdd398f" alt="" width="552"><figcaption></figcaption></figure>

Flag: `CURTIN_CTF{C0NGR4TUL4T10N5_0N_Y0UR_H0M3C0M1NG}`

***



*   ## Content Missing - II



    <figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FetGCjs3HAyuNaeFfyQlT%2Fimage.png?alt=media&#x26;token=dbe6440e-2bf8-45b2-931c-7cd58ffb33c7" alt="" width="353"><figcaption></figcaption></figure>



After exploring through web page via page source, I discovered that one of the missing image source location are different from the others.  Try to go the the `/static/Content.png` will give me the hidden flag in image format.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FgnxU6RB3ejnVkSCkeYRS%2Fimage.png?alt=media&#x26;token=cbdaaebb-4ae8-4978-81f1-709ccf59d7e8" alt="" width="563"><figcaption></figcaption></figure>

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FY375D7KC8jDebF4cP4pb%2Fimage.png?alt=media&#x26;token=53c5e3a8-4603-41e4-8834-e132d8500e3d" alt=""><figcaption></figcaption></figure>

Flag: `CURTIN_CTF{N33D_F0R_ B3TT3R_C0D3_R3V13W}`

***



*   ## Join The Union



    <figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FgKtu4tKWma7XRLUAwr6Z%2Fimage.png?alt=media&#x26;token=d6665d05-7e20-4153-9837-2f3fcd732537" alt="" width="369"><figcaption></figcaption></figure>



Going to the registration page will direct me to the dead end. Try to view network tab on inspect give me this weird Content-Location on http header `/g3t_53cR3t_fl4g`. When going to the directory, it show the `Method Not Allowed`.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FprjsNDm2Bp8WhYGduKxE%2Fimage.png?alt=media&#x26;token=ec5bd4f9-fc84-429a-98fa-04b1b26f9f7b" alt="" width="390"><figcaption></figcaption></figure>

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FLYsGcFjsbvz8SQkD0nLJ%2Fimage.png?alt=media&#x26;token=ac1a1de0-6f45-40e9-be43-1b7e733fe390" alt="" width="563"><figcaption></figcaption></figure>

Now its time to use burp suite! Try to change the http method from `POST` to `GET` give me `Who are you?`. Since it asks me who am I, from the weird looking cookie I tweak the http header and make the `Referer` as part of http header. Result gives me `Invalid Secret`.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FByHugdftURuuL8dXhVFr%2Fimage.png?alt=media&#x26;token=8958e97f-3570-4f66-9fb5-a786055d25a8" alt="" width="441"><figcaption></figcaption></figure>

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FEX6mVdeRiawJCbEfEesL%2Fimage.png?alt=media&#x26;token=876841a1-c5e5-434c-90fc-da57826092da" alt="" width="449"><figcaption></figcaption></figure>

Since its response with invalid secret, I place `53c43t` in cookie into http header and got the flag.

<figure><img src="https://906050983-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FNUYCtlc0k8qWwmB2FmiA%2Fuploads%2FzohQpl9M33pJY2hMw3C3%2Fimage.png?alt=media&#x26;token=4873e069-4639-432c-b60a-1c6ff48118f1" alt="" width="483"><figcaption></figcaption></figure>

Flag: `CURTIN_CTF{Th15_Fl4g_15_h15hly_c0nf1d3nt14l}`

