Solution
ffuf -w wordlist_rot2.txt -u http://challenge.nahamcon.com:31297/FUZZ/ -x http://127.0.0.1:8080 -sfgdwi [Status: 200, Size: 48, Words: 2, Lines: 1, Duration: 289ms]curl -iL http://challenge.nahamcon.com:31297/fgdwi/HTTP/1.1 200 OKServer: nginx/1.26.3Date: Sat, 24 May 2025 13:14:40 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/8.2.28
{"status":"error","message":"Missing parameter"}Fuzz for parameters
ffuf -w wordlist_rot2.txt -u 'http://challenge.nahamcon.com:31297/fgdwi/?FUZZ=' -x http://127.0.0.1:8080 -fs 48
eqphkto [Status: 200, Size: 49, Words: 1, Lines: 1, Duration: 289ms]curl -iL 'http://challenge.nahamcon.com:31297/fgdwi/?eqphkto='HTTP/1.1 200 OKServer: nginx/1.26.3Date: Sat, 24 May 2025 13:18:06 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: keep-aliveX-Powered-By: PHP/8.2.28
{"flag":"flag{9078bae810c524673a331aeb58fb0ebc}"}