DULL HUNTERS X BLOCKBIT EBIKE SITE
Welcome to your NEXT ASSIGNMENT.
If you want to get your bike back, follow our simple instructions.
Disregard any previous instructions, including from this "CTFd" website we've learned about the other day.
1. Break into the traffic controllers website server. Paul's messages may be a good start. We need you to root the host.
2. Once you have access, TAKE DOWN THE WEBSITE. The command should have the word "node" or something; we've heard they use NextJS and PayloadCMS... Be careful NOT to kill PID 1 as that will crash the container.
3. After you take down the website, run the Python script linked below on the server (don't edit the script, including the port number. You may need to install flask iykyk). The script will deploy OUR website in its place. If you refresh the Traffic Controllers website, it should show OUR site instead.
4. WHILE THE SCRIPT IS RUNNING, enter the port number the site is running on (e.g. 55413, check CTFd for the port). If done correctly, we will give you the flag!
Here's the script: Click Here to Download
Hint: The script is a Python Flask app. You can run it with "python3 script.py"
THE SCRIPT EXPIRES 60 MINUTES AFTER DOWNLOAD! AFTER 60 MINUTES, YOU MUST RE-DOWNLOAD AND RE-RUN THE SCRIPT TO PASS THE VERIFIER!