# ▼▼▼Reference(Web:100point、310/531=58.4％)▼▼▼**This writeup is written by [@kazkiti_ctf](https://twitter.com/kazkiti_ctf)**
```What is your reference again?http://chal.noxale.com:5000```
---
`http://chal.noxale.com:5000`
↓
`Check_from_google` is written in the URL part
↓
Guess that checking the Referer header
## 【exploit】```GET /check_from_google HTTP/1.1Host: chal.noxale.com:5000Referer: http://google.co.jp/```
↓
`bm94Q1RGe0cwb2dMM18xc180bFc0WXNfVXJfYjNTVF9SM2YzcjNuYzN9`
↓decode by Base64
`noxCTF{G0ogL3_1s_4lW4Ys_Ur_b3ST_R3f3r3nc3}`