Did you know that you could access server variables from within server side included HTML?

All you have to do is somehow get the value from the internal web server variable $ETSCTF defined in the NGiNX server configuration. Check the headers returned for a hint on what key you need to hack.

Pay attention at the default file extension used. There are two more flags on variables that are always defined on an nginx server { } section of the configuration.

To start the challenge connect to http://10.0.14.12:1337/index.shtml. There is also a memcached service running at port 10.0.14.12 11211. Your timer starts from the first time you connect to either of the running services on the system.