### Misc - Out of the Bucket

Given site https://storage.googleapis.com/out-of-the-bucket/src/index.html


let's open only `/out-of-the-bucket/` directory.


Now we see that there is a `secret/dont_show` in this directory

<Contents>
<Key>secret/dont_show</Key>
<Generation>1703868647771911</Generation>
<MetaGeneration>1</MetaGeneration>
<LastModified>2023-12-29T16:50:47.809Z</LastModified>
<ETag>"737eb19c7265186a2fab89b5c9757049"</ETag>
<Size>29</Size>
</Contents>

open https://storage.googleapis.com/out-of-the-bucket/secret/dont_show

We have downloaded this file, just open it through the terminal

`cat dont_show`

FLAG:

uoftctf{allUsers_is_not_safe}

Original writeup (https://github.com/zer00d4y/writeups/blob/main/CTF%20events/UofTCTF/UofTCTF_2024.md).