Posts

Showing posts with the label SVG

Web Ring - Open Boria Mine Door Wlakthrough

Image
After hearing more hints from Alabaster Snowball upon completion of Boria PCAP mining challenge , we walk to Hal TandyBuck who asks us to unlock the Boria Mine door. Upon accessing the terminal we are presented with a HTML/Graphics programming challenge. Where we need to link up two color sensors in each panel and link them up all together to open the mine door. Hints collected on this challenge give us some direction around what needs to be done in order to connect the color sensor and what controls we need to bypass. Challenge Difficulty 3/5 1. The locks take input, render some type of image, and process on the back end to unlock. To start, take a good look at the source HTML/JavaScript. 2. Developers use both client- and server-side input validation to keep out naughty input. (input validation bypasses ?) 3. Understanding how Content-Security-Policy works can help with this challenge. (maybe we will have to use Burp?) After doing a bit of reading from the following Reference URLs b...