Skip to main content

We use cookies to ensure you get the best user experience. For more information see our cookie policy.

Capture!

Can you bypass the login form?

Task 1: General information

SecureSolaCoders has once again developed a web application. They were tired of hackers enumerating and exploiting their previous login form. They thought a Web Application Firewall (WAF) was too overkill and unnecessary, so they developed their own rate limiter and modified the code slightly.

Before we start, download the required files by pressing the Download Task Files button.

Answer the questions below

  1. I have downloaded the capture.zip file.

Task 2: Bypass the login form

Please wait approximately 3-5 minutes for the application to start.

You can find the web application at: http://MACHINE_IP

Answer the questions below

  1. What is the value of flag.txt?
Room Icon

Capture!

Can you bypass the login form?

easy

180 min

16,311

User profile photo.
User profile photo.

To access material, start machines and answer questions login.

Score updated
Score updated

Securesolacoders

SecureSolaCoders has once again developed a web application. They were tired of hackers enumerating and exploiting their previous login form. They thought a Web Application (WAF) was too overkill and unnecessary, so they developed their own rate limiter and modified the code slightly.

Before we start, download the required files by pressing the Download Task Files button.

Answer the questions below
I have downloaded the capture.zip file.

Set up your virtual environment

To successfully complete this room, you'll need to set up your virtual environment. This involves starting both your AttackBox (if you're not using your VPN) and Lab Machines, ensuring you're equipped with the necessary tools and access to tackle the challenges ahead.
Attacker machine
Status:Off
Lab machine
Status:Off

Please wait approximately 3-5 minutes for the application to start.

You can find the web application at: http://MACHINE_IP

Answer the questions below
What is the value of flag.txt?