Super Control 1 - CTF 91

CTF Name: Super Control 1
Topic: Web Exploitation
Flag Format: ICTF{}
Description:
You can control a server using terminal. Using terminal you can get sensitive information. If you need help, type help command.
Website: https://ictf.ihcbd.xyz/SuperControl/
Solution:
When we visit the website, it appears like a terminal. We can type the "help" command to see a list of available commands, including: "hi," "help," "echo," "flag," "url," and "ictf." However, these commands do not seem to be anything special.
Curiosity piqued, we decide to investigate further by examining the source code of the website. In doing so, we stumble upon a file named "script.js." Upon opening this file, we come across a previously unknown command: "supersecret."
Intrigued by this newly discovered command, we enter it into the terminal. To our surprise, it reveals a hidden path - "/secretadminpanel." Eager to explore further, we navigate to this path and, lo and behold, discover the flag in the URL.
Flag: ICTF{5UP3R_C0N7R01_4DM1N_P4N31}
Join Our CTF Channel: