TyphoonCon 2021 Impasse
Description: When I was doing a pentest on a given target, I found this page. I think it’s vulnerable, but I’m not good at PHP, are you?
Difficulty: Easy
Recon When you visit the site for the challenge it brings you to a page titled “Printer”, with an input bar and a checkbox for a debug option.
When I enter input and submit the form, it runs an HTTP GET request with echo ‘{my-input}’ as the value for the print parameter.