You have a simple challenge, proove your web skills and get the flag. Website
Update 10:00 EEST: Check index.php~.

Author: Andrei

Hey, hey can you find my secret.

UPDATE 10:13 Eastern: the flag is whatever is in sys.argv[2]

cipher.py
encrypted

The cookie is input + flag AES ECB encrypted with the sha256 of the flag as the key.

nc crypto.chal.csaw.io 1578

nc misc.chal.csaw.io 4239

I wrote a little proxy program in NodeJS for my poems folder but I’m bad at programming so I had to rewrite it. Again.

I changed up flag.txt too but everyone still wants to read it…

http://web.chal.csaw.io:7312/?path=orange.txt

I wrote a little proxy program in NodeJS for my poems folder.

Everyone wants to read flag.txt but I like it too much to share.

http://web.chal.csaw.io:7311/?path=orange.txt

Do it
Just do it
Don’t let your dreams be dreams
Yesterday you said tomorrow
So just do it
Make your dreams come true
Just do it
Pick 1: http://web.chal.csaw.io:5487 http://web.chal.csaw.io:5488 http://web.chal.csaw.io:5489 http://web.chal.csaw.io:5490

Can you put agent Gill in the naughty ad section? His phone number is “555-31338”

Service: http://naughtyads.alieni.se/

Author: avlidienbrunn

Damn new york… some chick tricked you into standing in the rain on the very first day… it’s payback time!

Service: http://sprinklers.alieni.se/

Author: avlidienbrunn

Category: Web
Point: 200
Description:
Look! I wrote a good service for sharing your files with your friends, enjoy)
share-point.quals.2017.volgactf.ru

Hints

1. flag’s location is optimal