Go

Platform: CUSTOM | Category: Web | Type: Challenge | Difficulty: Easy | OS: N/A | **Author: XESXOR Techniques: http_request_interception, parameter_tampering

Summary

Walkthrough of the CUSTOM Web Go. A task from the burp category on the Web Kids 2.0 platform. URL: https://burp.2537ly.space/task2/

Description

A task from the burp category on the Web Kids 2.0 platform. URL: https://burp.2537ly.space/task2/

Analysis

The task requires intercepting and modifying an HTTP request. When submitting the form, parameters are sent to the server that can be modified before they reach it. The key point is the presence of hidden form fields or parameters whose values need to be changed.

Solution

Step 1: Intercept the request

Use Burp Suite or curl to intercept the HTTP request when submitting the form. ‍​‌‌​​​​‌​‌‌​​‌‌​​‌‌​​‌‌​​‌‌​​‌​​​​‌‌​​​​​‌‌​​‌‌​​‌‌​​‌​‌​‌‌​​‌​‌‍

Step 2: Modify parameters

Change the value of the hidden field or parameter before sending it to the server.

 bash read-only • copy allowed Copy
# Example with curl - parameter modification
curl -X POST 'https://burp.2537ly.space/task2/' \
  -d 'param=modified_value'

Step 3: Get the flag

After modifying the parameters and sending the request, the server returns the flag. ‍​‌‌​​​​‌​‌‌​​‌‌​​‌‌​​‌‌​​‌‌​​‌​​​​‌‌​​​​​‌‌​​‌‌​​‌‌​​‌​‌​‌‌​​‌​‌‍

Key Takeaways / Lessons

• Mastering http_request_interception, parameter_tampering was key to this challenge.
• Always check for common misconfigurations and verify assumptions.

---

Crafted by XESXOR Research • 2026-03-09 • CUSTOM • Go • Difficulty: Easy