webmedium

112 - Умный переулок (Smart Alley)

duckerz

Task: Investigate the Smart Alley system to access video recordings and find hidden information. Solution: Exploited deprecated API v1 endpoint with broken access control to obtain video file, then used ffmpeg for frame extraction to read flag from a sign at 43-second mark.

$ ls tags/ techniques/
frame_extractionapi_versioning_exploit

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]