“N”ot “G”am”I”ng a”N”ymore in “X”mas
Category: web
50 points
Can you login as admin? http://no-gaming-anymore-in-xmas.ctf2021.hackpack.club
Solution
The challenge consists of the simple login page. Nothing extraordinary ;-)
Interesting part is hidden input field in the form.
Let’s try to set debug to 1 and check what happen after login attempt.
Surprisingly, I’ve got nginx configuration in response.
Flag was hidden under https://no-gaming-anymore-in-xmas.ctf2021.hackpack.club/maybehereimportantstuff
Flag
flag{ng1nx_m1sconf1g_c4n_b3_h4rmful}