$ cat writeup.md…
$ cat writeup.md…
hackerlab
Task: an nginx site returned only custom 403 and 404 pages, but the less-damaged 404 page exposed an extra favicon asset. Solution: compare both error pages, fetch the missing favicon, extract printable strings, and pick the candy-themed flag that matches the icon hint.
Permission denied (requires tier.pro)
Sign in with GitHub, Discord, or Google to continue. No email required.
$sign in$ grep --similar