write-ups-challenges-2024-2025/peanutbutter-challenges/peanutbutter-secret-post/SOLUTION.md

Difficulty

??

Category

Web

How To Solve

When visiting the homepage, a GET request is made to the server to obtain the blog posts. Using the Chrome DevTools, you can inspect the response.

Notice that this response corresponds to the blog posts visible on the homepage, with one difference. The homepage doesn't show the blog post with id bee229bc-4147-4c34-9418-9572e9f0ee1b. When clicking on other blog posts, you see that the URL for every blog post is structured as follows: /posts/<id>. Simply going to /posts/bee229bc-4147-4c34-9418-9572e9f0ee1breveals the hidden blog post with the flag.

Flag

IGCTF{M4d3_fr0m_p3Anuts}