HITCON CTF 2016: %%% (Web) Write-up

Descriptions:

Although it is easy, but I still made this challenge because it is useful in penetration testing.
http://52.196.116.69/

Solution:

1. Access to the web,  Have an error about certificate.

2. View certificate.

3. very-secret-area-for-ctf.orange.tw, Try to modify hosts file.

52.196.116.69 very-secret-area-for-ctf.orange.tw

4. Access to very-secret-area-for-ctf.orange.tw and get a flag.

Flag: hitcon{hihihi, how 4re y0u today?}