Target from: CTF Beginners

Basic, Non rootable

juggling-flea / 10.0.41.14

1: Flag (app)
1: Service
300 pts

#headshot

Level 5 / Junior Securitas

ThefirstFish / 693rd Place

1: Flags found
1: Service discovered
300 pts
14 minutes

This API changes password with every request, see if you can find a way to authenticate successfully. There is no need for brute-forcing the authentication with random passwords. However, you may have to try a couple of times the same authentication to get it working... Even if the password is just 1 digit!!!

To start the challenge connect to http://10.0.41.14:1337/. Your timer starts from the first time you connect to the service.

228 Headshots (newer first)

ra0wl, sufull, jesbry, Uwuntu, johnjohn, suki, ThefirstFish, TheRealFredP3D, BlueVoiD, manu1008061, steezy, ZeproxNom, Azure160, ahsanch445, ulandave, dungcngo, IArstuk, seed, nirvana96
SDKk, segfaults, heyonyx, sudozer0day, NegaRequiem, rengoth, n3thacker, zabubu, kuwguap, okias, horlali, muskslayer, roronoazolo, 00DEADC0DE00, Netrunner, N30HxDAEMON, Panda00, kevin2758, mikehawk, hocrux, warrior32, Bizbihackers3, JuanPablo23ag, Akkher, keita15, CASTIxm20, ElGuzmi, zlykh, CWIJK, FrankX12, C3r0d4y

Activity Stream

Latest activity on the platform

ThefirstFish managed to headshot [juggling-flea], 1 month ago
ThefirstFish Got the flag from the juggling-flea for 290 points, 1 month ago
ThefirstFish Getting started with the juggling-flea for 10 points, 1 month ago