This blog post contains the writeup for two challenges (No SEQUELS & No SEQUELS 2), because they are related. So let’s start with No SEQUELS first. 1. No SEQUELS 1 Category: Web Points: 50 1.2 Challenge Description The prequels sucked, and the sequels aren’t much better, but at least we always have the original trilogy. Hint said : MongoDB is a safer alternative to SQL, right?

Challenge Description Category Points Solves web 100 18 This is the URL for the challenge. URL:http://ctf.hacklab-esgi.org:8082/ So, as soon as we visit the given URL, we get a simple web page saying Website Checker and the title saying super curling (this gonna be fun!!). we notice that there is one input in the page, whatever you give as input gets passed to curl as a parameter.

Description Category Points Solves Forensics 994 19 Description : Help me get back my flag ! URL: https://web8.ctfsecurinets.com/ After visiting the link above, we get a login page.We can login using admin/admin, but unfortunately the flag is deleted. Then I started searching in the website for any other infos, but with no success. the admin of the challenge (Tr'GFx) said that bruteforcing directories is enough to solve the challenge, so I used dirsearch.