With DocHub, you can easily revise flag in xht from anywhere. Enjoy capabilities like drag and drop fields, editable text, images, and comments. You can collect electronic signatures safely, add an additional level of defense with an Encrypted Folder, and work together with teammates in real-time through your DocHub account. Make changes to your xht files online without downloading, scanning, printing or sending anything.
You can find your edited record in the Documents folder of your account. Edit, share, print, or convert your document into a reusable template. With so many powerful features, it’s easy to enjoy seamless document editing and management with DocHub.
TECH SUPPORT was a web challenge from the Google CTF 2020. In the end 90 teams solved it. I was part of solving this for our team ALLES! But it was definitely a team effort. So lets have a look. Try chatting with tech support about getting a flag. And here is the URL. So lets quickly get an overview of the application. I also already have burp setup to see what the app is doing. Lets first register an account. Myusername. Mypassword. Register. Okay. We see the POST request also here. Now login. Myusername and mypassword. Cool. Then we find here an address field. So lets try a simple xss. Img onerror. Submit. And we have here a XSS. Cool. Then we have this Chat Now functionality, where we can chat with tech support. Lets try another XSS payload here, but we also need to get passed this captcha. This is also typical for CTF challenges with a bot. Because on the server they have a bot that has to open the browser so you can attack it with XSS. And this is very resource intensive and