Clear it in 3 steps
Start the environment
Investigate the target
Submit the flag
All challengesIn progress
Web-09. The Weak Basic Auth Trap
Mission
A protected area is guarded by HTTP Basic Authentication, but the developer accidentally left the credentials in an HTML comment on the public page. Check the page source.
Not started
Hints
Hint 1Show
Check the page source (Ctrl+U or similar)
Hint 2Show
Look inside HTML comments `<!-- ... -->`
Hint 3Show
Try the credentials you find at the Basic Auth prompt