OOO archive --- DEF CON CTF [ login ]

dc2020q - dogooos web

by trickE

This was a jeopardy challenge, part of dc2020q. (CTFtime)

Points: 151
Was solved by: 26 teams
PCAPs: download

You may spawn the server:

On your laptop

This challenge may require more resources or special steps:

  • Install docker
  • docker pull archiveooo/pub:dogooos (docker-saved download)
  • docker run -d --name dogooos archiveooo/pub:dogooos
  • Local IP: docker inspect dogooos -f '{{ .NetworkSettings.Networks.bridge.IPAddress }}'
  • Connect to that IP:37453 — Remember to docker rm -f when done.
On your laptop (full source)

This challenge may require more resources or special steps:

  • Install docker and pip install PyYAML coloredlogs
  • git clone https://github.com/o-o-overflow/dc2020q-dogooos-public
  • cd dogooos
  • ./spawner --log-level=INFO
  • Connect to the ip:port displayed

Description

DogOOOs is a new website where members can rate pictures of dogs. We think there might still be a few bugs, can you check it out? In this challenge, the flag is located in the root directory of the server at /flag. http://dogooos.challenges.ooo:37453

line_weight dogooo_comments.py line_weight loaddata.py

Hints

None yet :(
If you wish, you can contribute some.

Source

Spoilers ahead! Code for this challenge is publicly available.