[cavour13]

Official Htb WEBCHALLENGE CDNio


Let's discuss without leak anything and with no spoilers

[x1rx]

give attention to challenge description , hint is there

[ent0xE]

Tip for those who struggle:

nginx.conf:

location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {

/main/routes.py

    if re.match(r'.*^profile', subpath): # Django perfection

those are the key elements to solve the challenge. think how could we cache the request with the bot.py

[whare]

It was pretty funny the box

[robinia]

Tip for those who struggle:

nginx.conf:

location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {

/main/routes.py

    if re.match(r'.*^profile', subpath): # Django perfection

those are the key elements to solve the challenge. think how could we cache the request with the bot.py

thanks for the tips this made it a nice challenge afterall.

[st123]

need help please dm.

[test888]

Challenge is not that easy indeed

[iamsosorry]

Tip for those who struggle:

nginx.conf:

location ~* \.(css|js|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ {

/main/routes.py

    if re.match(r'.*^profile', subpath): # Django perfection

those are the key elements to solve the challenge. think how could we cache the request with the bot.py

thanks for the tips this made it a nice challenge afterall.

I tried this and check that is caching but have no idea how to get to the cached file lol

[mazafaka555]

web cache deception attack

[bxdman]

Can anyone help me with a hint?