Basic Challenge Level 11

Aftab Sama
Sep 10, 2024

--

Sam decided to make a music site. Unfortunately he does not understand Apache. This mission is a bit harder than the other basics.

Description: Not Available

Requirements: Not Available

Hints:

  • What is a directory index?
  • How does Apache keep users from seeing certain files within a directory?

Difficulty: Easy-ish.

Points: 55

Challenge Link: https://www.hackthissite.org/missions/basic/11

Forum Link:

Solution:

By reloading the page, different Elton John songs are displayed.

When we navigate to the e/ directory, we notice that directory listing is enabled.

The .htaccess Apache configuration file is accessible in the last directory, e/l/t/o/n/.

There is a file named DaAnswer.

This is tricky, but the answer is simple.

We sumbit can simple as a password in index.php.

Happy Hacking

--

--

Aftab Sama

Security Researcher | Offensive Security enthusiast 🏴‍☠️ | CTF Competitor | BSCP | CEH Practical