2026-08-21 13:51:31 +07:00
|
|
|
---
|
|
|
|
|
title: "Nothing Here — Web Comment"
|
2026-08-21 14:28:04 +07:00
|
|
|
type: "writeup"
|
|
|
|
|
section: "writeups"
|
|
|
|
|
status: "published"
|
|
|
|
|
author: "asep"
|
|
|
|
|
tags: ["gemastik", "ctf", "warmup", "web"]
|
|
|
|
|
path: "writeups/gemastik-2026-warmup/ch5-nothing-here.md"
|
|
|
|
|
created_at: "2026-08-21T07:25:28.880Z"
|
|
|
|
|
updated_at: "2026-08-21T07:25:28.880Z"
|
2026-08-21 13:51:31 +07:00
|
|
|
event: "GEMASTIK 2026 Warmup"
|
2026-08-21 14:28:04 +07:00
|
|
|
challenge: "Nothing Here — Web Comment"
|
2026-08-21 13:51:31 +07:00
|
|
|
category: "web"
|
|
|
|
|
points: 500
|
|
|
|
|
difficulty: "easy"
|
|
|
|
|
flag: "GEMASTIK19{v13w_s0urc3_pahlawan}"
|
|
|
|
|
---
|
|
|
|
|
# Nothing Here (500 pts) — Web
|
|
|
|
|
|
|
|
|
|
**URL:** `http://15.232.89.109:8001/`
|
|
|
|
|
|
|
|
|
|
Halaman bilang "tidak ada apa-apa" tapi flag ada di **HTML comment**:
|
|
|
|
|
|
|
|
|
|
```html
|
|
|
|
|
<!-- Catatan dev: jangan lupa hapus flag ini sebelum rilis: GEMASTIK19{v13w_s0urc3_pahlawan} -->
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Recon
|
|
|
|
|
|
|
|
|
|
```bash
|
|
|
|
|
curl -s http://15.232.89.109:8001/ | grep -i 'GEMASTIK\|<!--'
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
## Flag
|
|
|
|
|
|
2026-08-21 14:28:04 +07:00
|
|
|
`GEMASTIK19{v13w_s0urc3_pahlawan}`
|
