Game 3 – 01

Description

Get the password from the URL below.

Open URL

Instructions

Type password from URL

Solution

Visiiting the provided URL, we see a page called start.html with the content:

Try visiting the home page of the website, http://g3.inovace.eu/ , we see a directory listing :

The files in the directory are:

• resume.pdf
• resume.docx
• start.html

Opening the resume.pdf and resume.docx file, we see the following content:

resume.pdf:

resume.docx:

Ater opening the resume.pdf and resume.docx file, we can see the password in the content.

Flag/Password

References

• https://portswigger.net/kb/issues/00600100_directory-listing
• https://cwe.mitre.org/data/definitions/548.html