HyperText Transfer Protocol (HTTP)

Objective : To get the flag, start the above exercise, then use cURL to download the file returned by '/download.php' in the server shown above.

Target(s): 83.136.253.125:47106

Note: I'm using Pwnbox, so you don’t need to set up a local VM for this.

First, we open a terminal that uses the Bash shell.

cURL can be used to make basic HTTP request and to download a page or a file, whereas the -0 flag allows us to output the content of the file.

The command would look like this : curl -0 http://<target-ip>/download.php

Flag captured : HTB{64$!c_cURL_u$3r}