CTFs | 404CTF_2024 | Web | Vous etes en RETARD

Vous êtes en RETARD

In this challenge we are just given an URL and we need to exploit this web site:

Nothing interesting… Because we can’t fuzz with gobuster, let’s try looking in the source code for something interesting:

As we can see, there is a page we didn’t know about /donnez-moi-mon-ticket-pitie. Lets go there:

This new page just tells us that we still don’t have access to the stadium…

We notice that is the window.validable includes our ticket ID, then we will get to the match, otherwise we won’t have any access. Lets just add our billet ID to the valiable:

With this, we have access to the match and we get a congratulation message:

This lets us think that we need to look in the cookies: