Some websites store users searches in the database so that links to those searches are accessible later. This application emulates that functionality.
- Navigate to the homepage of the application and perform a search with the network tab open.
- Inspect the result. In the response body you will see a
/searches/#num. This number increases every time you search. - Browse directly to
<url>/searches/1and you will see the results from that search but you will not see the actual query run. - Realize that the app is using json for some of its endpoints and browse directly to
<url>/searches/1.jsonwhich will give you the actual query run, which in this case also contains the flag.
MCA{just_browsin'_my_search_history}