webeasy
Beautiful jewelry
grodno_new_year_2026
Task: Django jewelry shop web application with a publicly accessible /media/ directory. Solution: Discovered the flag in a plaintext file at /media/secret.txt by guessing common filenames in the accessible media directory.
$ ls tags/ techniques/
directory_enumerationcommon_filename_guessingmedia_directory_access
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub, then upgrade to Pro.
$ssh [email protected]