Challenge

A “can it visit links” service that would fetch internal URLs (SSRF). The flag endpoint was on a local port that had to be guessed. I DMed the challenge author and they told me it was on 5000. Hitting http://127.0.0.1:5000/flag returned it in the response body.

Flag

ictf{U_4r3_55RF_Exp3e7_N0w}