$ cat writeup.md…
$ cat writeup.md…
spbctf
Task: Web app fetches user-provided URLs via PHP curl with protocol validation. Solution: Bypassed HTTP-only check using open redirect to file:// protocol via CURLOPT_FOLLOWLOCATION misconfiguration.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar