Jsonquiz

Jsonquiz CorCTF 2022 writeups

We were given the link jsonquiz.be.ax.

I googled the questions and found that they are the same as in https://quizack.com/json/questions-and-answers .

Just searched the page for the answer.

I opened the network inspect tool just in case.

After i answered question 15, there was a post request with payload “score=0”

I copied the request as cUrl

curl ‘https://jsonquiz.be.ax/submit' -X POST –data-raw ‘score=0’

change it to:

curl ‘https://jsonquiz.be.ax/submit' -X POST –data-raw ‘score=100’

and got the response

{"pass":true,"flag":"corctf{th3_linkedin_JSON_quiz_is_too_h4rd!!!}"}

thats it.