“N”ot “G”am”I”ng a”N”ymore in “X”mas
Can you login as admin? http://no-gaming-anymore-in-xmas.ctf2021.hackpack.club
The challenge consists of the simple login page. Nothing extraordinary ;-)
Interesting part is hidden input field in the form.
Let’s try to set
debug to 1 and check what happen after login attempt.
Surprisingly, I’ve got nginx configuration in response.
Flag was hidden under https://no-gaming-anymore-in-xmas.ctf2021.hackpack.club/maybehereimportantstuff