$ cat writeup.md…
$ cat writeup.md…
tjctf
Task: Flask web challenge with a custom admin bot, a localhost-only admin endpoint, and a URL fetch feature. Solution: Abuse `/admin/../` path normalization to satisfy the bot regex while reaching `/?url=...`, then let the server-side request leak the appended flag to a webhook.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar