[soulmate]

Anyone have the write up for download machine

[darkmanu]

very difficult!!!

[diegogr]

Hard machine any hints

[flagbot]

very difficult!!!

wacky really

[4ip0k]

A few hints.
1) create an account and log in to the personal account.
2) intercept the user's authorization request, note the server response header (string: X-Powered-By)
What is this application? What is the standard project structure for this application?
3) find a payload that will help you read files on the server
4) explore all the files you can find
5) pay attention to cookies
6) collect all the information received, there seems to be a way to manipulate cookies

Further more difficult. This is a really complex box.

[Addka72424]

The last non-spam response in the topic was more than a month ago. I close the topic as irrelevant to prevent spam. If this is not the case, please send a pm and I will open the topic for discussion again.