Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
This URL Fetcher service retrieves and displays the content of any URL a user provides. Check whether it can be tricked into reaching an internal-only service that the server itself can access.
This application fetches any URL you provide
There is an internal service running on 127.0.0.1:8080
Try making it access http://127.0.0.1:8080/flag