CSC2023 - [Web] - Case Proxy

You,•CSC2023Web
Back

Challenge Description

Case proxy has some issues

Solution

SSRF using url shortener

Flag is at http://127.0.0.1:1337/flag (opens in a new tab)

Alt text

But 127.0.0.1 is in blacklist

Alt text

so we would go for url shortener or domains which resolves to localhost

https://cutt.ly/7wGcTdvM

Alt text

Flag

CSC{G00d_j0b_Y0u_h4ve_succ3ssfully_byp4ss3d_pr0xy}

Writeups 2023 © RootxRAN.