Natas2

Problem

We arrive at a webpage that says:

There is nothing on this page

Solution

First we inspect the page.

Turns out there is something in the page, we see that there’s an image file located at <website>/files/ named pixel.png, if we take a look at it, it’s just a 1x1 pixel image, a dummy file. But now we know there’s a dir called files/ so let’s try and access it.

We found another file called users.txt! Let’s see what’s in it

Flag

sJIJNW6ucpu6HPZ1ZAchaDtwd7oGrD14

Takeaway

• Snoop around into dirs where you’re not supposed to go to