back to home

GLASSHEADS, pt. 5 Challenge #2 - Fire

The Setup

Perform a DoS attack against this LULZ server to reveal the flag.

Follow the instructions on the challenge page. DO NOT JUST RANDOMLY ATTACK THE SERVER.

We are given a URL, https://glassheads5-flood.tficomic.io/.

The Flood

The flood page tells us:

Your unique URL: https://glassheads5-flood.tficomic.io/?code=[code-redacted]

Send 2500 GET requests to this page within 60 seconds to reveal the flag.

Progress: 1/2500

We just need to fire 2500 requests at the URL within the time limit. GNU parallel lets us run many curl calls at once:

seq 1 2500 | parallel -j50 'curl "https://glassheads5-flood.tficomic.io/?code=[code-redacted]";'

Once the counter reaches 2500, the flag is revealed.