This site seems awfully suspicious, do you think you can figure out what they're hiding?
- Display source code
CTRL + U.
- The page is only including an image
- See the
move_along/sub-folder and go in it
- Nginx listing functionnality is not disabled so we can see there is a sub-folder [
0f76da769d67e021518f05b552406ff6/][secretfolde] (dirb won't work).
- There is a secret image
secret.jpgcontaining the flag