https://anthr4ce.github.io/tags/rootmectf-20k/Recent content in Rootmectf-20k on Anthrace | CTF WriteupsHugoen-usMon, 12 May 2025 00:00:00 +0000https://anthr4ce.github.io/ctf-writeups/rootmectf-20k/web-traineetrainee/Mon, 12 May 2025 00:00:00 +0000https://anthr4ce.github.io/ctf-writeups/rootmectf-20k/web-traineetrainee/<p>Description:</p> <p><img src="images/trainee-desc.png" alt="Screenshot"></p> <p>The trainee made a weird commit that’s flooding the server with requests—and eventually blocking connections. We’re hinted that something strange is lurking in their Nginx setup.</p> <p>As soon as we connect we have a file reader form. I stared with a whatweb</p> <p><img src="images/trainee-whatweb.png" alt="Screenshot"></p> <p>With this we know the backend runs a Nginx 1.24.0. I tried to research for a file like a file.txt, example.txt localhost and /etc/nginx because of what could be a nginx misconfiguration.</p>