Module "WEB requests". To get the flag, use cURL to download the file returned by '/download.php' in the above server

HTB Content Academy
#22

You need elevated permissions. Use sudo when editing the file.
-onthesauce

#23

I entered the cmd below, but I can’t download the file named download.php
curl -0 46.101.52.69:31273/download.php

That IP address and the port number is what the question ask to use. Can someone help me here.

#24

you have to submit the key inside the file that you downloaded from server

so the syntax will be :

curl -O ipaddress:port/download.php

then

cat download.php

then you will get key inside the file , that key you have to submit as an answer.

#25

The problem is, that cmd is not downloading the file. I have tried this on multiple days on different IPs. Could you try it.

[★]$ pwd
/home/htb-ac538885
─[us-academy-2]─[10.10.14.28]─[htb-ac538885@pwnbox-base]─[~]
└──╼ [★]$ ls
Desktop Documents Downloads Templates
─[us-academy-2]─[10.10.14.28]─[htb-ac538885@pwnbox-base]─[~]
└──╼ [★]$ curl -0 209.97.142.95:30707/download.php
HTB{64$!c_cURL_u$3r}─[us-academy-2]─[10.10.14.28]─[htb-ac538885@pwnbox-base]─[~]
└──╼ [★]$ ls
Desktop Documents Downloads Templates
─[us-academy-2]─[10.10.14.28]─[htb-ac538885@pwnbox-base]─[~]
└──╼ [★]$

#26

inside the question you will see swap with target system option. first click on that then you will get
the ip with port then use that ip and port for download.

for instance : syntax will look like this
curl -O 10.30.29.39:8080/download.php // here -O means --remote-name Write output to a file named as the remote file

then cat download.php or you can also use text editor because the purpose is only to get the key from download.php