{"id":301,"date":"2025-12-28T17:41:45","date_gmt":"2025-12-28T17:41:45","guid":{"rendered":"https:\/\/thered0ne.com\/?p=301"},"modified":"2025-12-29T17:46:00","modified_gmt":"2025-12-29T17:46:00","slug":"picoctf-notepad","status":"publish","type":"post","link":"https:\/\/thered0ne.com\/?p=301","title":{"rendered":"PicoCTF – Notepad"},"content":{"rendered":"
\n
\"\"<\/figure>\n<\/div>\n\n\n

Introduction:<\/h2>\n\n\n\n

Hi Hackers,<\/p>\n\n\n\n

It\u2019s been a minute\u2026 hmm, actually, more like a year or so, but who\u2019s remembering? My blog has been sitting here collecting dust as f**k like an old book you swear you\u2019ll read it tomorrow. Well, today\u2019s is the day and I’ve got a new article for you \ud83e\udd73<\/p>\n\n\n\n

To get back into the rhythm, I decided to warm up with a fun picoCTF<\/strong> challenge called Notepad<\/strong>. In this article, I\u2019ll share my full methodology and how I managed to solve it, with all the little discoveries along the way.<\/p>\n\n\n\n

Let\u2019s dust off this blog and jump right in!<\/p>\n\n\n\n

The challenge:<\/h2>\n\n\n
\n
\"\"<\/figure>\n<\/div>\n\n\n

Super simple ! you have to write something and submit it. What it does, it generates a file containing the content you submitted and it redirects you to it. The difficulty mentioned for this challenge is HARD and the only hint is “This note-taking site seems a bit off.<\/em>“<\/p>\n\n\n\n

The funny thing is, when I solved the challenge and read the available write-ups, my approach was kind of weird. I took another path totally different. I used my modest knowledge in SSTI (Server Side Template Injection) and tried to find a way to get the flag. My solution is a little bit long and complicated but that was really worth it ! \ud83e\udd13<\/p>\n\n\n\n

Source code<\/h2>\n\n\n\n
<\/circle><\/circle><\/circle><\/g><\/svg><\/span>