wafwaf

Platform: HackTheBox | Category: Web | Difficulty: Medium | Author: D3v0o0Nu11 | Date: 2026-02-10

Description

My classmate Jason made this small and super secure note taking application, check it out!

Solution Approach

Core idea: Identify the weakness from source review or fingerprinting first. Iterate with incremental payloads instead of guessing.

Steps

1. First, open the host given.

2. Got a php source code file.

Flag

(no flag captured)

Lessons Learned

1. Identify the weakness from source review or fingerprinting first.
2. Iterate with incremental payloads instead of guessing.
3. Reuse the same pattern in future engagements.