CTFs | 404CTF_2024 | Web | Le match du siecle

Le match du siecle [1/2]

Here, we need to find a way to get a ticket for the match. We arrives on a basic page and we see that we can create an account so that’s what i did and I connect to it:

As we can see, there is now a Solde that tells us we didn’t put any money on the website and a button to check our newly bought tickets. I checked the cookie to see if there was anything interesting…

So… Obviously, I put 10000 in the balance and now…:

Now that we have enough money to buy any ticket, lets buy the Tribune Laterale:

We receive a message that tells us that we have bought the ticket and if we check our tickets:

Lets obtain it and… Voilà:

Le match du siecle [2/2]

Now that we “bought” our ticket, and we would like to get a VIP one. But those ticket are not available anymore… Lets see how we got the first flag by intercepting the request:

As we can see, we have in token the name of our ticket. Lets change it to VIP:

As you can see we got another flag.