📊 Challenge Overview

Category	Details	Additional Info
🏆 Event	Hacker101 CTF	Event Link
🔰 Category	Web	🌐
💎 Points	1	Out of 1 total
⭐ Difficulty	🟢 Easy	Personal Rating: 0/10
👤 Author	Unknown	Profile
🎮 Solves (At the time of flag submission)	Unknown	solve rate
📅 Date	24-02-2025	Hacker101 CTF
🦾 Solved By	mH4ck3r0n3	Team:

🎯 Challenge Files & Infrastructure

Provided Files

1	Files: None

🔍 Initial Analysis

First Steps

Initially, the website appears as follows:

Here, as we can see, there is nothing interesting, so I decided to inspect the page source.

Here, I only found a background image in the css, which apparently isn’t displayed. Let’s move on to the exploitation.

🎯 Solution Path

Exploitation Steps

Exploitation

Since the image wasn’t displayed as a background, I visited the /background.png route to see what the image was, and that’s how I found the flag.

Flag capture

🛠️ Exploitation Process

Approach

The automatic exploit makes a GET request to /background.png and extracts the flag using a regex from the response.

•  Exploit

🚩 Flag Capture

Flag

Proof of Execution

Screenshot of successful exploitation

🔧 Tools Used

Tool	Purpose
Python	Exploit
ChromeDevTools	Web Testing

💡 Key Learnings

Skills Improved

• Binary Exploitation
• Reverse Engineering
• Web Exploitation
• Cryptography
• Forensics
• OSINT
• Miscellaneous

📊 Final Statistics

Created: 24-02-2025 • Last Modified: 24-02-2025 *Author: mH4ck3r0n3 • Team: *