Qiwi CTF 2014: Milk Road

Category: Web Points: 150 Author: babayaga Description:

Capture the flag!

https://qiwictf2014.ru:16443/

Write-up

The URL in the description points to a web shop where you can register, log in, and buy items. The /robots.txt file reveals:

User-agent: *
Disallow: /templates/

Sure enough, https://qiwictf2014.ru:16443/templates/ contains an open directory listing with six HTML templates. Let’s download them:

$ wget -r https://qiwictf2014.ru:16443/templates/

The templates are available in the templates folder within this repository. It looks like shop.html contains some conditional logic to display the flag:

{% if flag %}
<h1>{{ flag }}</h1>
{% else %}
<tr>
<form method="post" action="">
<td>
<input type="hidden" name="item_id" value="31337">
<img src="/static/WMHlogoweb.gif" width="300px">
</td>
<td>$2048</td>
<td><input type="submit" value="Buy"></td>
</form>
</tr>
{% endif %}

https://qiwictf2014.ru:16443/templates/ https://qiwictf2014.ru:16443/templates/

(TODO)

Other write-ups and resources

• none yet