GET aHEAD

27 September 2026

Summary

Find the flag being held on this server to get ahead of the competition

Analysis

The challenge name hints at HTTP methods (GET, HEAD) which means the flag may be hiding in there. I also checked the website in my web browser, but there wasn't anything interesting.

What is an HTTP request method?

An HTTP request method, also sometimes referred to as "HTTP verb", indicates what an HTTP request is for and what response should be expected. The most common ones are: GET, HEAD, PUT, POST, DELETE. For this exercise, we are interested in the HEAD request method which only sends the headers.

Solution

In order to solve the challenge, we can use the curl command to send a request to the server. We will also need the -I option:

    -I, --head
        (HTTP  FTP  FILE)  Fetch the headers only. HTTP-servers feature the command HEAD
        which this uses to get nothing but the header of a document. When used on an FTP
        or FILE URL, curl displays the file size and last modification time only.
        Providing --head multiple times has no extra  effect.   Disable  it  again  with
        --no-head.

        Example:
        curl -I https://example.com
                

This will be the resulting output.

F0XGL0V3