Description


Your target is a space station's web portal which is a front for a secret Command and Control setup. Armed with a username and a list of potential passwords, your first challenge is to find the right combination to log in. 

Once inside the portal, you'll need to discover and exploit a hidden vulnerability. This will reveal the location content of a highly guarded cosmic secret.

Objective: Grab the secret information hidden on the portal!

 


Resources


  • Link to space station's web portal

Flags


Retrieve the flag from the highly guarded cosmic secret.

Flag format: FLAG1_XXXXXXXXXX


Real-World Relevance


Web application vulnerabilities such as SQL Injection, Command injection, Remote Code Execution, Server Side Request Forgery are regularly exploited to access sensitive systems and information.


Weapons Recommendation