Barry's Web Application


I've made this cool new web application that I plan to use to host a blog. Please check it out at Right now it's still currently being built, but I hope you enjoy what's there so far!


Browsing to the provided URL displays a very generic web page:

I viewed the HTML source looking for possible clues in HTML comments, linked Javascript, CSS or other resources, but the page contained none. Given that the URL path was /dev/webapp/ I tried traversing back a directory and found that directory listings were enabled on the web server:

Under the “docs” directory there was a file named flag.txt and it contained the challenge flag:




Leave a comment