Hacking Insights by Max Bautista

El Pipo writeup

Challenge name: El Pipo

Difficulty: Very Easy

Challenge Scenario: An ancient spirit, El Pipo, has taken control of this place. Face your fears and try to drive it away with your most vicious scream!

Link: https://app.hackthebox.com/challenges/El%2520Pipo?tab=play_challenge

Machine IP: 154.57.164.78:32426

Brought us to a webpage with an input form.

Checked source code and I can see the javascript that sends it to the server.

Considering the name, I was playing with pipes to run a command on the server but I wasn’t getting anything back. Eventually I wanted to test if I could run curl and I got the flag curling a webhook.

GG