webeasy

Palevo

spbctf

Task: A blog with hints about mod_status and DDoS. Solution: Accessed /server-status endpoint to find active requests containing hidden URLs with the flag in a secret parameter.

$ ls tags/ techniques/
apache_mod_status_disclosureserver_status_leak

🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Create a free account with GitHub, then upgrade to Pro.

$ssh [email protected]