[lego]

hello guys any 1 finished this challenge: https://app.hackthebox.com/challenges/apacheblaze

so this is the snipet code but i feel something weird 
```
elif game == 'click_topia':
        print(request.headers.get('X-Forwarded-Host'))
        if request.headers.get('X-Forwarded-Host') == 'dev.apacheblaze.local':
            return jsonify({
                'message': f'{app.config["FLAG"]}'
            }), 200
        else:
            return jsonify({
                'message': 'This game is currently available only from dev.apacheblaze.local.'
            }), 200
```

so basicly the solve should be curl $ip/api/games/click_topia -H "X-Forwarded-Host: dev.apacheblaze.local" but it's not work

[ChromaD4rkn3ss]

Look into: https://github.com/dhmosfunk/CVE-2023-25...-injection , read the whole thing for your own benefit, everything is explained.

The answer is practicly allready there, you have to just tweak it a little bit. In order to understand what is happening, you should add  "print(request.headers)" somewhere in your own code copy and run it locally, once you understand how things work it is a straight forward job  . Also, learning how Apache HTTP server works might be benefitial for further challenges. Best of luck, feel free to DM me if you need further help.

[CandelarioRempel]

Look into: https://github.com/dhmosfunk/CVE-2023-25...-injection, read the whole thing for your own benefit, everything suika game is explained.

The answer is practicly allready there, you have to just tweak it a little bit. In order to understand [url=https://suikagameonline.io][/url] what is happening, you should add  "print(request.headers)" somewhere in your own code copy and run it locally, once you understand how things work it is a straight forward job  . Also, learning how Apache HTTP server works might be benefitial for further challenges. Best of luck, feel free to DM me if you need further help.

Thx. Exactly what I was looking for.

[weakdaw221]

thanks for sharing i was looking for this