CTFs | 404CTF_2024 | Web | Exploit mag

Exploit mag

The main idea here, is that we can’t access the articles from the website without paying for a subscription. But we can’t get any be cause we are redirected when we try to get one:

At first I tried to remove the code that was on top of the text, but the hidden text is just a Lorem Ipsum nonsense. Because we can’t use gobuster, I lost a lot of time on this one and finally, I thought about the robots.txt file:

As we can see, the google bots have access to anything on the server. So we can change our user agent to a google bot one.

I used this user agent switcher

And now we have access to the pages:

Now if we look the Dataleak au 404 CTF article, we get the flag: