webeasy
Presence of Absence
hackerlab
Task: an nginx site returned only custom 403 and 404 pages, but the less-damaged 404 page exposed an extra favicon asset. Solution: compare both error pages, fetch the missing favicon, extract printable strings, and pick the candy-themed flag that matches the icon hint.
$ ls tags/ techniques/
error_page_differential_analysisexposed_asset_inspectionprintable_strings_extraction
🔒
Permission denied (requires tier.pro)
Sign in to access full writeups
Create a free account with GitHub to get started.
$ssh [email protected]