Sunday, October 26, 2014

Natas 3

This one's body section looks like this:
<div id="content">
There is nothing on this page
<!-- No more information leaks!! Not even Google will find it this time... -->

The "not even Google" part is probably a reference to the robots.txt file used to restrict bots & spiders.

Looking at shows there's secret, hidden directory called "/s3cr3t/"

Browsing there, we find another users.txt file.


No comments:

Post a Comment