misc · insane · 750 pts
Acme has a frontend proxy that blocks /admin. Behind it, the backend serves /admin unauthenticated. Smuggle a request past the proxy. --- ### Run locally ```bash cd content/aysec/AYSEC-CTF docker compose up http-smuggle ``` Then open `http://localhost:80` and start solving.