Brief

Midnight Relay delivers parcels after dark. A customer has reported a Route 07 parcel missing; its last stop has no delivery photo. The night driver must check the handoff and follow up on the report.

Goal: compromise the courier system and submit the flag from /root/flag.

Hints

Open them one at a time
Hint 1

Customer notes reach the driver's screen. Consider how the night driver reads them while you wait for a reply.

Hint 2

PHP are dangerous, yet more than 50% apps in the word are programmed by it.

Hint 3

The courier monitor checks the site and saves regular system snapshots. Once you have a foothold, see what it keeps locally.

Details

Released
2026-11-13
Writeups
None yet
Author
axura
Tags
xssgit-leakphpphardeserialization

Created by Axura