Skip to content

Commit

Permalink
fix: typo on Angstrom23 Hallmark writeup (#29)
Browse files Browse the repository at this point in the history
  • Loading branch information
pklone authored Jul 10, 2023
1 parent 33e9328 commit a69c061
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion _posts/2023-04-27-AngstromCTF.md
Original file line number Diff line number Diff line change
Expand Up @@ -420,7 +420,7 @@ print(r.text)
> _https://hallmark.web.actf.co/, https://admin-bot.actf.co/hallmark_<br>
> _Attachments: dist.tar.gz_
Starting with the description of the challenge, we know what the goal is to create some cards and send them to the admin. There's the possibility to put images into them, choosing from a predefined list of 4. Otherwise, a custom text is accepted. Moreover, from app source code we see that `/flag` is accessible only from admin. XSS flavour around here, do you feel it?
Starting with the description of the challenge, we know the goal is to create some cards and send them to the admin. There's the possibility to put images into them, choosing from a predefined list of 4. Otherwise, a custom text is accepted. Moreover, from app source code we see that `/flag` is accessible only from admin. XSS flavour around here, do you feel it?

```javascript
// the admin bot will be able to access this
Expand Down

0 comments on commit a69c061

Please sign in to comment.