Fuzzing GET Parameters with ffuf - "Flag in Space" Web Challenge [Space Heroes CTF 2022]
Video walkthrough for a Web challenge, "Flag in Space" from the Space Heroes (CTF) competition 2022. In this challenge we fuzz a GET parameter to retrieve the flag. We'll solve with both crunch/ffuf and with a python script (requests). Write-ups/tutorials aimed at beginners - Hope you enjoy 🙂 #SpaceHeroes #SpaceHeroesCTF #CTF #Pentesting #OffSec
↢Social Media↣
Twitter: / _cryptocat
GitHub: https://github.com/Crypto-Cat/CTF
HackTheBox: https://app.hackthebox.eu/profile/11897
LinkedIn: / cryptocat
Reddit: / _cryptocat23
YouTube: / cryptocat23
Twitch: / cryptocat23
↢Space Heroes CTF↣
https://ctftime.org/event/1567
https://spaceheroes.ctfd.io/challenges
/ discord
↢Resources↣
Ghidra: https://ghidra-sre.org/CheatSheet.html
Volatility: https://github.com/volatilityfoundati...
PwnTools: https://github.com/Gallopsled/pwntool...
CyberChef: https://gchq.github.io/CyberChef
DCode: https://www.dcode.fr/en
HackTricks: https://book.hacktricks.xyz/pentestin...
CTF Tools: https://github.com/apsdehal/awesome-ctf
Forensics: https://cugu.github.io/awesome-forensics
Decompile Code: https://www.decompiler.com
Run Code: https://tio.run
↢Chapters↣
Start: 0:00
Investigate website: 0:10
Generate wordlist with crunch: 0:56
Fuzz flag with ffuf: 1:49
Solve with python script: 3:55
End: 6:11