Skip to main content

Name: Beep beep boop

Description​

Look for hidden files on the web server.

Vulnerability​

Information disclosure in robots.txt leading to a hidden PHP file. The cookie from that page also needs to be set to a certain value.

Exploit​

Script in ./sol/solution.sh

Environment​

Apache web server. (deployable as a Docker container using files in deploy/ folder)

Deploy​

Deployment is done via Docker using the Dockerfile and support files in the deploy/ folder.

Copy the challenge folder to the remote hosting system, then:

  • enter the src folder and run make. This will create a public/ folder with the contents of the website.
  • enter the deploy/ folder and run make run. This will create and deploy the Docker container with the proper port redirection in place.

If you need to update the image and container, first use make clean to remove the old container, then use make to update the image (and the container). It is not possible to update the container without updating the image first.