CrypteraCTF : nexus
info & goal :
The challenge presents an internal company environment where access is limited to employee-level resources.
The objective is to analyze the application’s behavior and bypass its security controls, and access restricted confidential data in order to retrieve the flag.
Initial Reconnaissance :
the challenge has 3 pages this was the first (dashboard) and as we see we got nothing in it .
Get R3K0’s stories in your inbox
Join Medium for free to get updates from this writer.
2nd page :
there is a data classification that caught my eye with is the “Confidential” and after analyzing it i figured that this is a “local file inclusion” vulnerability that we could exploit it and retrieve the flag from it .
exploiting the vulnerability :
we could use this vulnerability to read whatever files that are stored on the web server when knowing its location so in this challenge the flag was very obvious that u just need to type /flag.txt after the page= , like this
and boom we got the flag
here is a video that explains LFI
https://www.youtube.com/watch?v=vaHLMI4Ry8c
thanks for reading .
