Flag Checker

less than 1 minute read

🌐 Flag Checker

Category Author
🌐 Web Soups71

Challenge Prompt

We’ve decided to make this challenge really straight forward. All you have to do is find out the flag!

Juuuust make sure not to trip any of the security controls implemented to stop brute force attacks…

Problem Type

  • Web timing attack

Solve

Use Burp to send 1 character change at a time with intruder.

Check the X-response time in the response.

Correct character should increment by 1 each time

0.6xxx

0.7xxx

0.8xxx

0.9xxx

1.0xxx

1.1xxx

Etc.

Flag

flag{77ba0346d9565e77344b9fe40ecf1369}

(back to top)