Developer Disaster
Briefing:
Recruit, quick job for you. We’ve been using the shipping company website to keep an eye on which ships have been coming in and out of port. However, it looks like their developer pushed an update to the site, which has broken it and then he went home for the day!
There’s an error message on the site. See if you can find a way around it to get us back in.
Tip: Get back in to get the flag.
Hint:
POST data is not stored in the URL like GET data, so it is harder to work with. You can use curl to send POST data, go to your terminal and type $ man curl
for more information.
How to Solve:
- In a Linux terminal, use the curl tool to query the URL with the UserID parameter:
curl https://slowlaneshipping.com/latest -d 'UserID'
Answer:
- undelayUndelayArriba