findme (Medium)

  • Challenge Link: https://play.picoctf.org/practice/challenge/349?category=1&difficulty=2&page=2
  • Challenge Description: Help us test the form by submiting the username as test and password as test!
  • Hints:
    1. any redirections?

Solution

This challenge wants us to test the form using the credentials:

test, test!
Front

Once we logged in, we are directed into this site where you really can't do much here, even using inspect and trying the form won't get us the flag.

Fake

But, if we payed attention, when we logged in using the credentials, we can see that there were two redirects before it acutally took us to the site. If we just go back a page by clicking the arrows you can see these two links

redirect 1 redirect 2

Combining the strings we get: cGljb0NURntwcm94aWVzX2FsbF90aGVfd2F5XzAxZTc0OGRifQ== and using a Base64 Decoder, that is our flag:

picoCTF{proxies_all_the_way_01e748db}

Sources