Misc

Cyber Quiz

Description

Solve Walkthrough

• Just answer all the questions after making a connection.
• ChatGPT was helped me a lot. 😂

Flag

OSINT

The statue is being repaired

Description

Solve Walkthrough

• Save the picture chall and try to search with Google Lens. You will find 2 posts in Facebook (in Vietnam language).

• The image looks same, and then I explore the tag in the post #FPTAround.
• Seems like it refers to the FPT University in Vietnam.

• I do more exploration about fptaround and luckily I got the community page in Facebook: https://www.facebook.com/fptaround.

• I try to translate what is the Intro description.

• Nice, we got the city name: Ho Chi Minh.
• Next, we’ve to found what is the statue name. I just search FPT university statue in google, and found the useful wiki link: https://commons.wikimedia.org/wiki/File:Self-made_Man_statue_at_FPT_University_Ha_Noi.jpg.
• Alhamdulillah, I got the name of statue: Self-made man.

• Finally, we can crafting the correct flag format: selfmademan_hochiminh.

Flag

Web

1. Introspection

Description

Solve Walkthrough

• Visit the web page, and open the inspect element in web browser.

• Notice that the web page have JS file embedded. Open the script.js file and yeah.. we found the flag.

script.js

function checkFlag() {
  const flagInput = document.getElementById('flagInput').value;
  const result = document.getElementById('result');
  const flag = "OSCTF{Cr4zY_In5P3c71On}";
  
  if (flagInput === flag) {
    result.textContent = "Congratulations! You found the flag!";
    result.style.color = "green";
  } else {
    result.textContent = "Incorrect flag. Try again.";
    result.style.color = "red";
  }
}

• Check the flag for make sure. Sooo… ez dude.

Flag

2. Heads or Tails

Description

Solve Walkthrough

• From the title we know that the challenge is the web app vulnerable to SQL injection attack.
• Just performing basic SQL injection payload to bypass login: 1' OR 1=1--.
• Use the payload in username and password and it will make the username and password val0id. 4. In the default page, it will show the fake flag. You must be careful okay.

• But, you can access the admin page directly by changing the endpoint to /admin (if you know).

• If you don’t know what all endpoints or subdirectories inside the web page, you can do directory scanning using tool like dirsearch, feroxbuster, dirb, or gobuster. I recommend to use dirsearch cause they have default wordlist.

Flag

3. Indoor WebApp

Description

Solve Walkthrough

• Given a web app that we can see personal information, but notice that every person is have unique id: ?user_id value parameters.

• I try to change it to person 2 or ?user_id=2 and I got the flag.

• We can perform brute force attack to check if the spesific user_id is exist or not by using Burp Suite or simply cURL (combined with for/while loop).

• Luckily, we just have 3 available users.

Flag

4. Action Notes

Description

Solve Walkthrough

• I just try to login as admin and luckily the password that I guess is admin123 so I can the flag in the admin page.

• Try to guess common admin passwords, such as:

Flag