2024-10-21 HelpfulDesk (Web)

image.png

Trying to look for differences

image.png

image.png

image.png

Find something called setup wizard, could manipulate that.

image.png

Testing the application locally

image.png

Set local pass and login with:

admin

admin

image.png

Go back to SetupWiazrd and get 403

image.png

image.png

Can see the flag, now just have to get the flag

image.png

So use the SetupWizard to add new creds to challenge instance

image.png

image.png

Login with new credentials

image.png

image.png

Get logged in and navigate to the flag.txt

image.png

image.png

image.png

image.png

And we download the flag file

image.png

flag{03a6f458b7483e93c37bd94b6dda462b}

image.png