Rating: 4.3
The challenge is called Vampire, which causes association blood.
There is also this gif in the website:
![](https://i.imgur.com/B3Anj4u.pnghttp://)
Those two made me imeddiatly think about heartbleed, also the website has a self signed certificate so it's also suspicious.
I have used metasploit to try and check if it's actually vulnerable to heartbleed and it is:
![](https://i.imgur.com/SDwp9Vw.png)
Now i can run the exploit script serveral times to leak some data:
![](https://i.imgur.com/2UI6IzF.png)
Now the website had a login page, so i decided to grep the leaked data for username and got the flag:
![](https://i.imgur.com/JldvVxW.png)
Flag:
```
BSidesTLV2020{Bl00d_Bl00d_Bl00d!!!}
```