Home PicoCTF 2018 Web Exploitation 250: Buttons
Writeup
Cancel

Web Exploitation 250: Buttons

Challenge
There is a website running at http://2018shell1.picoctf.com:21579 (link). Try to see if you can push their buttons.

Solution
The first button is a form and the second is an a href. Clicking the second
link gives a message about being denied. Changing the second button to a form
(so it will POST) result in success.

Flag

picoCTF{button_button_whose_got_the_button_ed306c10}