Tags: web images 

Rating:

## Missing Image
![date](https://img.shields.io/badge/date-11.01.2020-brightgreen.svg) ![web category](https://img.shields.io/badge/category-Web-lightgrey.svg) ![score](https://img.shields.io/badge/score-75-blue.svg)

### Description
```
Max has been trying to add a picture to his first website. He uploaded the image to the server, but unfortunately, the image doesn't seem to be loading. I think he might be looking in the wrong subdomain...
```

### Link (Probably doesn't work anymore)
- https://hidden.challenges.nactf.com/

### Solution
When visiting the link, we are greeted with this generic site:
![image-20201101175554898](C:\Users\joshu\AppData\Roaming\Typora\typora-user-images\image-20201101175554898.png)
As referenced in the title and the description of the challenge, we know that we are looking for some sort of image. After inspecting the page and going to the Network tab + reloading the page to see what type of traffic is going in. I see a 404 in the flag.png file:
![image-20201101180841364](C:\Users\joshu\AppData\Roaming\Typora\typora-user-images\image-20201101180841364.png)
In the description, we know that the image is being requested in the wrong subdomain. We see that it requests at http://challenges.nactf.com/flag.png.
But wait, the site we are on has a hidden subdomain. So once I added the flag.png and the subdomain in my search header, I found the flag.
http://hidden.challenges.nactf.com/flag.png

### Flag
```
nactf{h1dd3n_1mag3s}
```

Original writeup (https://github.com/JoshuEo/CTFs/tree/master/NACTF_2020).