DreyAnd / Original-Store-zh3r0

null origin CORS challenge source code from zh3r0 v2 CTF

This is the source code of the Original Store challenge from zh3r0 CTF v2, feel free to use the Dockerfile to set it up and play around the null origin CORS exploit.

Challenge name:

Original Store v2

Description:

Hi , some bad people stole our cars the last time so we made our security better this time, no one can break this. Our store is now at <challenge_link> while our car review page is at <admin_bot_link>

Author:

DreyAnd

Flag:

zh3r0{4dm1n_h4tes_car_st34l3rs_br0}