

Game of Faces

题目

The Game of Faces, welcomes you. In this era, where AIs generate a lot of faces, we would like you to contribute to the same by uploading your image. Thank you for contributing, to continue.

http://159.89.166.12:15000/

解决方案

打开网页，有三个色块，暂时看不到其它内容。Ctrl+U查看源码，有发现：

<form action='#' method = "GET" target="resultFrame">
    Upload Your Profile Picture : <input type="file" name="profile_pic" >
    <input type="submit" value="Upload Image" name="submit">
</form>

竟然有个上传文件的表单。随便选了个文件上传，跳转到一个新页面，有个字符串：

VGhlX3Njcm9sbF9zYXlzPXRoZV9uaWdodF9raW5nVlN2YWx5cmlhbi50eHQ==

Thescrollsays=thenightkingVSvalyrian.txt

尝试请求thenightkingVSvalyrian.txt：

pctf{You_L00K_Wi3Rd_IN_H3R3}

评论