Phantom Fetch

Web Hard 110 points 2 solves Website

Connect to the Challenge Server

Connect to the challenge server using the host and port below to access the CTF challenge.

Host
5.189.172.8
Port
10008

Problem Description

A web challenge that hides the flag on the server filesystem. The application exposes a convenient fetch proxy endpoint designed to retrieve remote URLs. However, it contains an SSRF-style oversight that allows access to local resources through the file:// scheme. Your goal is to exploit this behavior and retrieve the flag located on the server.

Login to submit a solution.

Frequently Asked Questions

This is a hard level problem worth 110 points.

This is a ctf challenge problem in the Web category.

2 users have successfully solved this problem.

Recent Solves

muhammadkarim 1 day, 10 hours ago
OtabekJurabekov 1 week, 4 days ago