PostOffice

Pwn weight 24.50 #forensics #telegram-api

Difficulty Not rated yet

♡ 0

Flag format: DVCTF{...}

I received a package today. A few minutes later, I received the following SMS asking me to pay for the delivery:

Chronopost: Veuillez confirmer le reglement des frais (2,99 EUR) et votre adresse de livraison du colis en cliquant sur le lien suivant: https://bit.ly/2Vw1THR

I found a weird PHP backdoor while the site was still active and have access to the source code. Can you find a way to see who got scammed?

Writeups

Official

No official writeup linked.

Community

Post Office — writeup by FAUST

https://ctftime.org/writeup/26331