Uploaded September 2023 | Updated September 2026, 5 hours ago

---

In this video, Tib3rius explains his solve of the medium difficulty rated "Museum" challenge from NahamCon CTF 2023.

0:00 - Introduction
0:20 - Starting "Museum" on the NahamCon 2023 CTF.
0:58 - Exploring the web app and source code.
2:04 - Playing around with the image loading functionality, trying basic file inclusion.
3:26 - Getting /etc/passwd using an extra forward slash.
5:07 - Running into a check preventing us from getting /flag.txt using the same method.
5:36 - Extracting the application source code using knowledge of Python Flask apps.
9:55 - Performing source code review to identify more vulnerabilities.
15:25 - Finding an SSRF vulnerability in the private_submission function(s).
17:10 - Exploiting the SSRF to save the flag into a file in the public directory.
21:43 - Outro

Twitter: twitter.com/0xTib3rius
Twitch: twitch.tv/0xTib3rius
Courses: courses.tib3rius.com
Udemy: udemy.com/user/tib3rius
Discord: discord.com/invite/4qrvKMh
TikTok: tiktok.com/@0xtib3rius
Threads: threads.net/@0xtib3rius
LinkedIn: linkedin.com/in/tib3rius
Facebook: facebook.com/0xTib3rius
InfoSec Exchange: https://infosec.exchange/@tib3rius
Bluesky: https://bsky.app/profile/tib3rius.bsky.social