found_not_found

MediumWeb Security

Overview

This is my secure site. I want you to test it for any vulnerabilities. If it's not secure, retrieve the flag located at /flag.txt

Flag Format: Flag{}

Lab Details

Prerequisites & Requirements

  • Basic understanding of web application security
  • Familiarity with HTTP requests and responses
  • Understanding of file upload vulnerabilities
  • Knowledge of Apache web server configuration
  • Basic reconnaissance and enumeration skills
  • Understanding of HTTP status codes

What will you learn?

  • How to identify and exploit insecure file upload mechanisms
  • Bypassing file upload restrictions using content-type manipulation
  • Exploiting Apache .htaccess configurations
  • Using custom error pages for information disclosure
  • Path traversal and directory enumeration techniques
  • Web application reconnaissance and testing methodologies

Tools

  • Web Browser - For initial reconnaissance and interaction
  • Burp Suite - For intercepting and manipulating HTTP requests
  • Text Editor - For creating malicious .htaccess files

Job Positions

Penetration Tester

Tags

Owasp Top 10Unrestricted File UploadServer MisconfigurationLfi