beginner · ~20 min
WebServer01
A single web host with Apache 2.4.49 (CVE-2021-41773). Find the path-traversal primitive, drop a foothold, retrieve the flag from /var/www/html/secret/.flag.txt.
reconwebexploitation
Three boxes, three skill sets. Nothing leaves your browser — every command is a pre-scripted output, every filesystem is an in-memory tree.
A single web host with Apache 2.4.49 (CVE-2021-41773). Find the path-traversal primitive, drop a foothold, retrieve the flag from /var/www/html/secret/.flag.txt.
A simulated /24. Enumerate the three live hosts, find weak SSH creds on the file server, pivot, retrieve the flag.
A box where every file holds a fragment of the flag encoded a different way. Decode each piece and assemble the final flag.