LSLol — Log in, stay here

Challenge author
Dan Hlavenka (SIGPwny)
Write-up author
Vanilla (Batman's Kitchen)
Points
200
Category
reversing

Description: https://blac.ksun.club/

The URL we are given redirects to a URL on a subdomain of agni.lindenlab.com. These type of URLs are used by the Second Life game to allow in-world scripts to run web servers. The Second Life simulator software adds X-Second-Life headers to responses showing where in the game the hosting object is, in case of abuse. We create a Second Life account and teleport there and find an object that gives us flag when we touch it.