Category

Web

Description

A new coffee shop is opening up in my neihborhood! It’s called Cuppa Joe and I can’t wait to check it out! It would ahem be a real shame if someone were to ahem hack their website and, hypothetically, get their secret flag.

Solution

Entering the challenge page we get a sitemap and a message input.

Going to https://mhsctf-cuppajoe.0xmmalik.repl.co/flag.php just return I don't know how you got here, please leave.

Sending a message returns

Thanks for your message:
test

Sending a POST request to /flag.php returns the flag.

Here's a flag: flag{c0ff33_be4nz}