Skip to content
This repository has been archived by the owner on Jan 17, 2024. It is now read-only.

web/wall #7

Closed
wants to merge 5 commits into from
Closed

web/wall #7

wants to merge 5 commits into from

Conversation

Jack-Crowley
Copy link
Contributor

No description provided.

@Jack-Crowley Jack-Crowley added the webex Web Exploitation Category label Aug 17, 2023
wall/chall.yaml Outdated
hints:
- How do websites communicate with servers
files:
- src: #IDK
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

maybe provide unbundled.js or smth?

wall/chall.yaml Outdated Show resolved Hide resolved
wall/chall.yaml Outdated Show resolved Hide resolved

The premise of the challenge is to make it to the safe square on the other side of the wall. This is a problem because as soon as the user makes any move, a wall spawns which blocks the user from reaching the safe square. As you look through the javascript or look at network connections, you can see that this game uses websockets.

Websockets are how the game communicates with the server, but you can a proxy, such as [Burp Suite](https://portswigger.net/burp), to intercept and change the messages before they reach the server.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consider using this link instead https://portswigger.net/burp/communitydownload (more direct to download of the specific product)

wall/src/app.js Show resolved Hide resolved
wall/src/index.html Show resolved Hide resolved
wall/src/public/index.css Show resolved Hide resolved
wall/src/unbundled.js Show resolved Hide resolved
@mud-ali mud-ali changed the title Web/wall web/wall Aug 17, 2023
@mud-ali mud-ali added the changes-requested Post-review, changes requested label Aug 17, 2023
@mud-ali
Copy link
Member

mud-ali commented Aug 18, 2023

also provide some information on how to build the app ( I see some webpack dependencies, not sure where/how to run the commands )

@mud-ali
Copy link
Member

mud-ali commented Aug 19, 2023

This would probably be more suitable as an easy chall for bcactf, or just used with lessons internally. I'm gonna leave this PR open until all the requested changes are finalized though. (Low priority)

@mud-ali
Copy link
Member

mud-ali commented Aug 25, 2023

unplanned, closing to clean up the PR list

@mud-ali mud-ali closed this Aug 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
changes-requested Post-review, changes requested unplanned webex Web Exploitation Category
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants