Post

Install files

Statement

You know phpBB ?

Solution

1
curl -i http://challenge01.root-me.org/web-serveur/ch6/
1
<!--  /web-serveur/ch6/phpbb -->

Get into that path

1
curl -i http://challenge01.root-me.org/web-serveur/ch6/phpbb

Nothing here! Let’s try dirsearch

1
dirsearch -u  http://challenge01.root-me.org/web-serveur/ch6/

Still nothing! Wait the minute, why the /phpbb does not appear…? Let’s check it

1
dirsearch -u  http://challenge01.root-me.org/web-serveur/ch6/phpbb/
1
200 -   12KB - /web-serveur/ch6/phpbb/install/

Get into it and you will have what you want

1
curl http://challenge01.root-me.org/web-serveur/ch6/phpbb/install/install.php

The flag is

1
karambar
This post is licensed under CC BY 4.0 by the author.