IE10.1

http://yctfinternet.liveblog365.com/

Challenge desc & ponts

Homepage

homepage

• hmm internet explorer

• first thing that came into mind was to fuzz User Agent

• tried fuzzing with seclist but not luck

• Searched for old internet explorer user agents

• Found this link :

https://www.whatismybrowser.com/guides/the-latest-user-agent/internet-explorerwww.whatismybrowser.com

Useragent

• the usergent that worked was : Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)

• just changed the HTTP method to POST and got the flag!!

Flag : YCTF{Happy_Hacking_Enjoy!}