Clear it in 3 steps
-
Start the environment
-
Investigate the target
-
Submit the flag
All challenges
In progress
Web-05. Directory Listing Trap
Mission
When an Nginx server has directory index listing (autoindex) enabled, anyone can browse the full file listing of a directory that was meant to stay private. Explore the exposed directory.
Hints
Hint 1 Show
Guess likely static file directory names (e.g. /files/, /uploads/)
Hint 2 Show
If directory indexing is enabled, the full file list is shown
Hint 3 Show
Look for a file containing the flag in that listing