Logo
Blue
Overview

Blue

March 29, 2025
1 min read

The SwampCTF team is trying to move our infrastructure to the cloud. For now, we’ve made a storage account called swampctf on Azure. Can you test our security by looking for a flag?The SwampCTF team is trying to move our infrastructure to the cloud. For now, we’ve made a storage account called swampctf on Azure. Can you test our security by looking for a flag?

Solution

found: https://swampctf.blob.core.windows.net

https://www.netspi.com/blog/technical-blog/cloud-pentesting/anonymously-enumerating-azure-file-resources/

Fuzz for containers https://swampctf.blob.core.windows.net/FUZZ?comp=list

https://learn.microsoft.com/en-us/rest/api/storageservices/list-containers2?tabs=microsoft-entra-id

Visit: https://swampctf.blob.core.windows.net/test/flag_020525.txt for the flag