BroncoCTF : Unblur me Writeup

Short summary

A CTF writeup for the 'Unblur me' challenge where a blurred image is supposedly gated behind solving 500 calculus derivatives. The gate is entirely client-side JavaScript with no server-side validation, and the image API endpoint is accessible directly via curl without any quiz completion. The flag is retrieved by simply fetching the unobscured PNG from the internal API endpoint.

• •Client-side quiz gate has no server-side enforcement
• •CSS blur() is visual only; underlying image bytes are always clear
• •Flag retrieved by directly calling the API endpoint with curl

Generated with AI, which can make mistakes.