webmedium
Bad Apple
tamuctf
Task: Flask app with ffmpeg GIF-to-frames conversion, Apache serves files with directory listing and Basic Auth on .gif files. Solution: Use directory listing to find flag filename, then exploit inconsistent input sanitization in /convert endpoint to process admin's auth-protected GIF and extract frames as unprotected PNGs.
$ ls tags/ techniques/
visual_flag_extractiondirectory_listing_exploitationinput_sanitization_bypassauth_bypass_via_format_conversion
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]