A router administration panel (Flask, MySQL) behind a chain of an outdated HAProxy and mitmproxy, with an internal device service behind it.
Not startedDockercommit 32abc33x86_64 · aarch64Secret
Exploit the http request smuggling weakness of a router administration panel (Flask, MySQL) behind a chain of an outdated HAProxy and mitmproxy, with an internal device service behind it and recover the flag (FLAG{...}) it guards.
The brief for this lab lives in its repository.