Description
LinkedIn disallows all robots to index some things, and these robots already know that your “keyword for next level” is a part of the e-mail address before @linkedin.com.
Instructions
Password is the keyword before @linkedin.com
Solution
The hint is about robots.txt file. The robots.txt file is a text file webmasters create to instruct web robots (typically search engine robots) how to crawl pages on their website. The robots.txt file is part of the the Robots Exclusion Protocol
(REP), a group of web standards that regulate web robot behavior. The REP is not a standard, but a convention.
The robots.txt file is a simple text file placed on a website’s server that tells webcrawlers which pages or files the crawler can or can’t request from your site. This is used mainly to avoid overloading your site with requests; it is not a mechanism for keeping a web page out of Google. To keep a web page out of Google, you should use noindex directives, or password-protect your page.
So, let’s check the robots.txt file of the LinkedIn website. The robots.txt file is located at the root of the website, so we can access it by visiting https://www.linkedin.com/robots.txt
Based on the hint, we are looking for an e-mail address. Specifically, we are looking for the keyword before @linkedin.com. We can use the Ctrl + F to search for @linkedin.com and find the keyword.
From the robots.txt file, we can see that the e-mail address is [email protected]. But the password is the keyword before @linkedin.com. So, the password is whitelist-crawl.
Note: The
robots.txtfile is a public file and is not meant to be hidden. It is used to instruct web robots how to crawl pages on the website. It is not a security measure and should not be used to store sensitive information.
Note: The level 3 of the game is not available at the time of writing this writeup. Because after solved the 2nd level, the next level is 4th level. So, I assume that the 3rd level is not available.
Flag/Password
Show
whitelist-crawl