---
title: "Discussion on \"HackSmarter - Casino Writeup\" | Hashnode"
description: "Discussion on \"HackSmarter - Casino Writeup\". Summary\nCasino is a Flask-based \"Guest WiFi & Portal\" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest"
url: "https://hashnode.com/posts/hacksmarter-casino-writeup/6a8d92c3fd8f07aabbc31d74"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [HackSmarter - Casino Writeup](https://exploitnotes.hashnode.dev/hacksmarter-casino-writeup?utm_source=hashnode&utm_medium=feed)

Summary Casino is a Flask-based "Guest WiFi & Portal" resort captive portal. A leaked JS source-map exposes an unauthenticated internal API endpoint (/api/v1/rooms/status) that dumps the entire guest

Aug 25 · 11 min read · exploitnotes.hashnode.dev  
Read the article

-   [#hacksmarter](https://hashnode.com/tag/hacksmarter)
-   [#ctf-writeup](https://hashnode.com/tag/ctf-writeup)
-   [#jinja2-ssti](https://hashnode.com/tag/jinja2-ssti)
-   [#ssrf](https://hashnode.com/tag/ssrf)
-   [#source-map-leak](https://hashnode.com/tag/source-map-leak)
-   [#idor](https://hashnode.com/tag/idor)
-   [#broken-access-control](https://hashnode.com/tag/broken-access-control)
-   [#docker-pentest](https://hashnode.com/tag/docker-pentest)
-   [#rce](https://hashnode.com/tag/rce)
-   [#credential-reuse](https://hashnode.com/tag/credential-reuse)
-   [#privilege-escalation](https://hashnode.com/tag/privilege-escalation)
-   [#linux-privesc](https://hashnode.com/tag/linux-privesc)
-   [#adm-group-exploit](https://hashnode.com/tag/adm-group-exploit)
-   [#flask-security](https://hashnode.com/tag/flask-security)

## Written by

[Yogeshwar Peela](https://hashnode.com/@exploitnotes)

@exploitnotes · Vishakapatnam, India

  
[View profile](https://hashnode.com/@exploitnotes)

I write detailed writeups on HackTheBox, PicoCTF and other CTF challenges. Passionate about web exploitation, Active Directory attacks and ethical hacking

## Responses

Markdown supported · ⌘↵ to post

No responses yet.