Spookifier

Target Information

  • IP: 167.71.137.174:31959

Exploitation

  • Going through the code, the first thing I noticed is that fonts 1-3 are only upper/lowercase letters and the space character, while font 4 has support for numbers and some symbols.

  • The only route is /, which can only take a text parameter.

    Tried using Burp suite to inspect the text...

  • Ran nikto -h 167.71.137.174 -p 31959 to look for vulnerabilities, but found nothing.