Zippy (Web Edition)

A web challenge where you neet to utilize the http range-header to get a file from a zip-archive.

Scenario-wise, this is a web-interface to download logs from a company server, but there is a download-size limitation for unauthorized users (and you can't log in).

Idea/Inspiration

The challenge was inspired by this article by Didier Stevens.

Links

• Challenge Generation
• Challenge Solution

Try it out

You can deploy this containerized challenge with the following simple command:

docker run -p 8080:80 ghcr.io/myrctfo/myrctf/2025/web-zippy:latest

Attribution

This challenge was made by arch-err