Description:

ed is the standard text editor.

This one has a few more… features.

Note: PDF exports crashed the server, so we had to disable that feature in entrypoint.sh — please re-download the challenge. This does not affect pwnability.

---

Download:

hackme-360ce70a02d8709d.tar.xz (15.1 KiB)

Connection (mirrors):

• http://168.119.224.64:8080/
  Flag is at http://168.119.224.64:8080/s/the-flag
  Report pages at http://168.119.224.64:8080/report?url=/your-page

Solution:

Show Flag

hxp{Yo dawg, I heard you like XSS, so I put some DOM injection in your script injection so you can inject scripts while you inject HTML while you inject scripts! Any questions?}

---

CTFtime: Task & Writeups